{"agent":"claude","input":"Audit this Rails repository without changing any tracked file. Return only JSON with three arrays. outdated_dependencies: gems named in the Gemfile whose latest release is at least one major version ahead of Gemfile.lock, with name, locked and latest. tests: each test, lint and seed command the CI workflows run, with the command, passed true or false, and the last 20 lines of output when it failed; set up the database the way CI does, inside the sandbox. risky_patterns: up to ten patterns such as SQL strings with interpolated input, params.permit!, constantize or send on request input, skipped CSRF protection, html_safe or raw on user data, or committed secrets, each with file, line, pattern and a one-sentence reason. You may install Brakeman in the sandbox to help, but read each warning before listing it.","resources":[{"url":"https://github.com/your-org/your-app"}]}