---
title: ToolRouter — Agent Use Case Guide
description: Step-by-step guide for completing a task with a specific AI agent using ToolRouter.
url: https://toolrouter.com/tools/vulnerability-database/use-cases/assess-severity-scores/copilot
---
# How to Assess Severity Scores with Copilot

Copilot correlates CVSS severity with your project dependency tree so you can focus on what is exploitable in your actual codebase. It maps severity scores to specific dependencies in your lockfile, highlights which are direct versus transitive, and helps you prioritize the fixes that reduce the most risk with the fewest changes.

## Setup

{"mcpServers":{"toolrouter":{"command":"npx","args":["-y","toolrouter-mcp"]}}}

## Steps

1. Add ToolRouter to Copilot MCP config
2. In Copilot Chat: "Assess severity for these CVEs" and provide the IDs
3. Copilot retrieves severity scores and ranks them
4. Ask: "Which of these affect my project dependencies?"

## Example Prompt

```
Assess the severity of the CVEs flagged by our dependency scanner. Rank them so I know what to fix first.
```

## Tips

- Copilot can correlate severity scores with your project's dependency tree
- Focus on fixing high-severity vulnerabilities in direct dependencies first
- Use severity data to justify security-focused dependency updates
