dependency-scanning
Part of GitHub's Copilot Advanced Security plugin, this skill has an agent look for known vulnerabilities in a project's dependencies through the Dependabot toolset of GitHub's MCP server and the GitHub Advisory Database.
What the skill teaches
Part of GitHub's Copilot Advanced Security plugin, this skill has an agent look for known vulnerabilities in a project's dependencies through the Dependabot toolset of GitHub's MCP server and the GitHub Advisory Database. It can list a repository's open Dependabot alerts, look up a single package, check dependencies added on a local branch before they are pushed, or run a full audit, with an optional post-commit check using the Dependabot CLI. Quick lookups go ahead directly, while downloading the CLI or auditing everything waits for the user's approval. It relies on the plugin's MCP configuration.
Capabilities
- List open Dependabot alerts for a repository
- Check one package for known vulnerabilities
- Scan new dependencies on a branch before pushing
- Run a full dependency audit
Details
| Fact | Value | Source |
|---|---|---|
| Type | Skill | |
| Tool | GitHub | |
| Publisher | GitHub | source |
| Official status | OfficialGitHub's official Copilot plugins marketplace links the Advanced Security plugin repository in GitHub's organisation | source |
| Needs an API key or sign-in | Not stated in its documentation | |
| Includes scripts | No | source |
| Platforms | Not stated in its documentation | |
| AI clients | Not stated in its documentation | |
| Licence | MIT | source |
| Pricing | Not stated in its documentation | |
| Activity | No commit dataDownload data not available (not on npm or PyPI) | |
| Links | Repository |
More from GitHub
1 server · 108 skills
- GitHub (MCP server)
- secret-scanning (Skill)
- chrome-devtools (Skill)
- aws-cdk-python-setup (Skill)
- aws-cloudwatch-investigation (Skill)
- bigquery-pipeline-audit (Skill)
Badge for your README
Maintain this project? Add a badge that links to this page.
[](https://kitbay.app/skills/dependency-scanning/)
Sources
- Skill file (SKILL.md)github.com/github/copilot-advanced-security-pluginNov 12, 2026
- GitHub repositorygithub.com/github/copilot-advanced-security-plugin · Backs: PublisherNov 12, 2026
- Licence file (LICENSE)github.com/github/copilot-advanced-security-plugin · Backs: LicenceNov 12, 2026
- GitHub repositorygithub.com/github/copilot-plugins · Backs: Official statusNov 12, 2026
- Folder in the repository (dependency-scanning)github.com/github/copilot-advanced-security-plugin · Backs: Includes scriptsNov 12, 2026