interface: display_name: "依赖安全扫描器" short_description: "扫描项目依赖中的已知漏洞(CVE),生成风险报告和修复建议。" policy: allow_implicit_invocation: true # 可被 CI/CD 等自动调用 require_confirmation: false max_retries: 1