[RyoKusnadi]

Problem

Step 2 of the scan-dependencies example skill tells the reader to run a curl POST, but the -d body isn't valid JSON. The nested objects and the root object are never closed, and it has a literal .... Anyone who copies the command, or an agent that runs it as written, sends a body the API can't parse.

Fix

Replace the inline body with the same complete payload shown in Step 1 (the NPM versionKey and the PyPI packageKey), so both steps match.

Scope

This is the only curl example with an inline JSON body under examples/ and docs/.

Testing

I used the check from the issue: it pulls the -d argument out of the bash block and parses it with json.loads.

• Before: Expecting property name enclosed in double quotes: line 8 column 9 (char 164)
• After: valid JSON with 2 requests

I didn't send a live request to the API.

Fixes #410

[RyoKusnadi]

Closing this for now, happy to reopen if it's useful.