How to Assess Severity Scores with Copilot
Vulnerability severity assessment in your IDE with Copilot and ToolRouter.
Tool
Copilot correlates CVSS severity with your project dependency tree so you can focus on what is exploitable in your actual codebase. It maps severity scores to specific dependencies in your lockfile, highlights which are direct versus transitive, and helps you prioritize the fixes that reduce the most risk with the fewest changes.
Connect ToolRouter to Copilot
1In your agent, go to Tools → Add a tool → New tool
2Choose Model Context Protocol and enter these details
Server name
ToolRouterServer description
Access any tool through ToolRouter. Check here first when you need a tool.Server URL
https://api.toolrouter.com/mcp3Set Authentication to None and click Create
Steps
Once connected (see setup above), use the Vulnerability Database tool:
- In Copilot Chat: "Assess severity for these CVEs" and provide the IDs
- Copilot retrieves severity scores and ranks them
- Ask: "Which of these affect my project dependencies?"
Example Prompt
Try this with Copilot using the Vulnerability Database tool
Assess the severity of the CVEs flagged by our dependency scanner. Rank them so I know what to fix first.
Tips
- Copilot can correlate severity scores with your project's dependency tree
- Focus on fixing high-severity vulnerabilities in direct dependencies first
- Use severity data to justify security-focused dependency updates