fix(ci): harden workspace dependency configuration

Author: tuanductran

.github/workflows/build-agents.yml

@@ -49,7 +49,7 @@ jobs:
 
       - name: Build AGENTS.md (single skill)
         if: ${{ github.event.inputs.skill != '' }}
-        run: pnpm nextdns-skills-build build --skill=${{ github.event.inputs.skill }}
+        run: node packages/nextdns-skills-build/dist/cli.mjs build --skill=${{ github.event.inputs.skill }}
 
       - name: Commit and push AGENTS.md changes
         run: |

.github/workflows/quality-checks.yml

@@ -46,6 +46,9 @@ jobs:
       - name: Build packages
         run: pnpm build
 
+      - name: Audit dependencies
+        run: pnpm audit:dependencies
+
       - name: Lint Markdown documentation and agent workflows
         run: pnpm lint:md
 

docs/CONTRIBUTING.md

@@ -53,6 +53,7 @@ After editing, run the smallest useful checks first. For rule or manifest change
 pnpm build:skills
 pnpm build:check
 pnpm run audit
+pnpm audit:dependencies
 pnpm lint:duplicates
 pnpm lint:fix
 pnpm lint:all

package.json

@@ -46,6 +46,7 @@
     "check-duplicates": "turbo run check-duplicates",
     "check-tags": "turbo run check-tags",
     "audit": "node packages/nextdns-scripts/dist/cli.mjs audit",
+    "audit:dependencies": "pnpm audit --audit-level=low",
     "dev": "turbo run dev",
     "format": "vp fmt",
     "format:check": "vp fmt --check",