The official GitHub Copilot Advanced Security plugin
Install
npx skills add github/copilot-advanced-security-plugingh skill install github/copilot-advanced-security-plugingit clone --depth 1 https://github.com/github/copilot-advanced-security-pluginSkills in this collection
- Dependency ScanningGitHubOfficialScan repository dependencies for known vulnerabilities using the GitHub MCP Server's Dependabot toolset and the GitHub Advisory Database. Use when asked to check dependency security, audit lockfiles, or verify packages before merging.
- Secret ScanningGitHubOfficialScan files, content, or recent changes for secrets such as API keys, passwords, tokens, and credentials using the GitHub MCP Server's run_secret_scanning tool.