Before you start
Add the Dependabot toolset: X-MCP-Toolsets: default,dependabot. The token or sign-in has to be allowed to read security alerts on those repositories.
1
List before you act
Say to Claude CodeList the critical Dependabot alerts across my repositories: the repository, the package, the fixed version if there is one, and the alert's link.
2
Check for existing issues
Say to Claude CodeFor each alert, check whether an open issue already mentions it. Show me the list with a yes or no beside each.
3
