diff --git a/skill-harness/package.json b/skill-harness/package.json
index cdcbf52..5d8d30f 100644
--- a/skill-harness/package.json
+++ b/skill-harness/package.json
@@ -22,7 +22,7 @@
   },
   "dependencies": {
     "@anthropic-ai/sdk": "0.91.1",
-    "js-yaml": "4.2.0",
+    "js-yaml": "4.3.2",
     "zod": "4.3.6"
   },
   "devDependencies": {
diff --git a/skill-harness/pnpm-lock.yaml b/skill-harness/pnpm-lock.yaml
index 9927198..f381555 100644
--- a/skill-harness/pnpm-lock.yaml
+++ b/skill-harness/pnpm-lock.yaml
@@ -15,8 +15,8 @@ importers:
         specifier: 0.91.1
         version: 0.91.1(zod@4.3.6)
       js-yaml:
-        specifier: 4.2.0
-        version: 4.2.0
+        specifier: 4.3.2
+        version: 4.3.2
       zod:
         specifier: 4.3.6
         version: 4.3.6
@@ -283,8 +283,8 @@ packages:
   get-tsconfig@4.14.0:
     resolution: {integrity: sha512-yTb+8DXzDREzgvYmh6s9vHsSVCHeC0G3PI5bEXNBHtmshPnO+S5O7qgLEOn0I5QvMy6kpZN8K1NKGyilLb93wA==}
 
-  js-yaml@4.2.0:
-    resolution: {integrity: sha512-ePWsvanv0DWuDRsW8dnt+R4jQ31SCRCQ7hhNcPXZPsoBZiemuZNYGf7adZdqX2D86j6rvKp3RpCxVTSb8WQlOw==}
+  js-yaml@4.3.2:
+    resolution: {integrity: sha512-SFNOvSJ+Dgf/9An904Yx+CgSlIPCkIpao4qo51lpee25TIRejdH3rhR4EZMGoNx3/TP3O+wzWuiTFl4sqbltzA==}
     hasBin: true
 
   json-schema-to-ts@3.1.1:
@@ -480,7 +480,7 @@ snapshots:
     dependencies:
       resolve-pkg-maps: 1.0.0
 
-  js-yaml@4.2.0:
+  js-yaml@4.3.2:
     dependencies:
       argparse: 2.0.1