---
title: ToolRouter — Agent Use Case Guide
description: Step-by-step guide for completing a task with a specific AI agent using ToolRouter.
url: https://toolrouter.com/tools/vulnerability-database/use-cases/research-vulnerabilities-by-software/copilot
---
# How to Research Vulnerabilities by Software with Copilot

Copilot brings vulnerability research directly into your editor where you are already working with the code. Point it at your package.json or requirements.txt and it will search CVE databases for every dependency, flag the risky ones inline, and suggest version bumps -- all without leaving your IDE or breaking your flow.

## Setup

{"mcpServers":{"toolrouter":{"command":"npx","args":["-y","toolrouter-mcp"]}}}

## Steps

1. Add ToolRouter to Copilot MCP config
2. In Copilot Chat: "Search for vulnerabilities in Express.js" and name the version
3. Copilot returns known vulnerabilities and details
4. Ask: "Should I upgrade this dependency based on the vulnerability history?"

## Example Prompt

```
Research vulnerabilities in the version of Express.js I am using. Check my package.json and tell me if I should upgrade.
```

## Tips

- Copilot can cross-reference your dependency versions against known vulnerabilities
- Research vulnerabilities before adding new dependencies to your project
- Use vulnerability history as one factor in dependency selection decisions
