AgentStack
Sign in Publish
MCP servers Skills Toolkits Why AgentStack Sell Docs
Sign in
MCP verified MIT Self-run

Copilot Advanced Security Plugin

mcp-github-copilot-advanced-security-plugin · by github

The official GitHub Copilot Advanced Security plugin

↗ Repository
— No reviews yet
0 installs
19 views
0.0% view→install

Install

$ agentstack add mcp-github-copilot-advanced-security-plugin

✓ scanned · ✓ verified — works with Claude Code, Cursor, and more.

Security review

✓ Passed

No issues found. Passed automated security review. · v0.1.0 How review works →

  • ✓ Prompt-injection patterns
  • ✓ Secret / credential exfiltration
  • ✓ Dangerous shell & filesystem operations
  • ✓ Untrusted network calls
  • ✓ Known-malicious package signatures

What it can access

  • ✓ Network access No
  • ✓ Filesystem access No
  • ✓ Shell / process execution No
  • ✓ Environment & secrets No
  • ✓ Dynamic code execution No

From automated source analysis of v0.1.0. “Used” means the capability is present in the source — more access means more to trust, not that it’s unsafe.

Are you the author of Copilot Advanced Security Plugin? Claim this listing to set pricing, connect Stripe payouts, and keep 70% of every sale.
Sign up to claim

About

Copilot Advanced Security Plugin

Security-focused plugin that brings GitHub Advanced Security capabilities into AI coding workflows through skills and MCP integrations.

What it does

The plugin helps agents identify and prevent credential exposure during development by:

  • Scanning code snippets, files, and git changes for potential secrets
  • Using GitHub secret detection patterns through MCP tooling
  • Supporting pre-commit checks to catch leaked credentials early

What's Inside

  • [Skills](skills/) - reusable capabilities that AI agents can invoke to perform specific tasks

Getting Started

This plugin requires the GitHub MCP Server. It works with any MCP-compatible AI agent or client, and is not limited to GitHub Copilot.

> Authentication: When using GitHub Copilot, authentication is handled automatically. For other clients (e.g., Cursor), you must include an Authorization header with a Bearer ${GITHUB_TOKEN}.

By default, Copilot CPI and VS Code don't enable the toolsets required by the skills in this repository. To simplify setup and usage, this plugin includes a preconfigured [.mcp.json](.mcp.json) file with the appropriate defaults.

Install

Install or enable the plugin in your preferred AI agent or client. For example, VS Code, using Agent plugins or using Copilot CLI via copilot plugins install. This plugin is already accessible in the default marketplaces exposed by both.

Usage

Ask your AI coding agent to use these security capabilities in natural language. For example:

> You: "Scan my staged changes for secrets before I commit" > Agent: Uses the secret scanning capability and reports the result > ✅ Staged changes are clean

Contributing

We'd love your contributions! Please read our [Contributing Guide](CONTRIBUTING.md) for details on how to submit pull requests.

License

This project is licensed under the [MIT License](LICENSE).

Source & license

This open-source MCP server is cataloged on AgentStack and links to its original source — we do not rehost the code.

Install and usage instructions live in the source repository linked above.

Reviews

No reviews yet — be the first.

Write a review

Versions

  • v0.1.0 Imported from the upstream source.

More in Developer Tools