security-alert-review

name	security-alert-review
description	List and review Advanced Security alerts for an Azure DevOps repository. Shows dependency vulnerabilities, secret exposure, and code scanning findings with filtering by severity, state, and alert type.

Security alert review

This skill works in the context of a project and a repository. Both are required to retrieve alerts.

Project selection

• If the user provides a project name in their request (for example, "for Contoso"), use that project directly and do not call core_list_projects.
• If the user does not provide a project name, first ask the user once to provide the project name.
• If the project name is still not provided after asking once, call core_list_projects to return a list of projects the user can choose from.

Repository selection

• If the user provides a repository name, use that repository directly.
• If the user does not specify a repository, ask the user once for the repository name.
• If the repository name is still not provided after asking once, call repo_list_repos_by_project to list available repositories for the user to choose from.

Tools

Use Azure DevOps MCP Server tools for all interactions with Azure DevOps.

• core_list_projects: Get a list of projects in the organization.
• repo_list_repos_by_project: Get a list of repositories for a project.
• advsec_get_alerts: Get Advanced Security alerts for a repository, with optional filters for severity, state, alert type, and confidence level.
• advsec_get_alert_details: Get detailed information about a specific alert by ID.