{"agent":"claude","input":"Audit this Next.js repository without changing any file. Return only JSON with three arrays. outdated_dependencies: direct dependencies whose latest release is at least one major version ahead of the locked version, with name, locked and latest; report canary or prerelease pins with a note. tests: each test command in package.json and the CI workflows, with passed true or false and the last 20 lines of output when it failed; if there are none, say so and report pnpm build and tsc --noEmit as the checks instead, using placeholder values from .env.example in the sandbox. risky_patterns: up to ten issues such as API routes or server actions that do not check the session, secrets read without a check that they are set, unverified webhooks, or user input reaching SQL or HTML unescaped, each with file, line, pattern and a one-sentence reason.","resources":[{"url":"https://github.com/your-org/your-app"}]}