diff --git a/_localsetup/requirements.txt b/_localsetup/requirements.txt
index 12f7cd8..06a30af 100644
--- a/_localsetup/requirements.txt
+++ b/_localsetup/requirements.txt
@@ -5,12 +5,12 @@
 #
 # PyYAML: YAML parsing for PUBLIC_SKILL_INDEX.yaml and other framework docs.
 #   Used by: tools/refresh_public_skill_index.py, tools/skill_index_scrub.py
-PyYAML>=6.0
+PyYAML>=6.0.3
 #
 # requests: HTTP client for URL probing and skill index refresh.
 #   Replaces manual urllib.request usage in scrub and refresh tools.
 #   Used by: tools/skill_index_scrub.py, tools/refresh_public_skill_index.py
-requests>=2.28
+requests>=2.34.0
 #
 # python-frontmatter: YAML frontmatter parsing for skill/PRD markdown files.
 #   Replaces fragile string-split frontmatter extraction.
@@ -19,7 +19,7 @@ python-frontmatter>=1.1
 #
 # cryptography: envelope encryption primitives (AES-GCM, HKDF, PBKDF2) for secure mail payload handling.
 #   Used by: skills/ls-mail-protocol-control/scripts/crypto_engine.py
-cryptography>=42.0
+cryptography>=48.0.0
 #
 # PGPy: pure-Python OpenPGP encryption/decryption support for secure mail exchange.
 #   Used by: skills/ls-mail-protocol-control/scripts/crypto_engine.py
@@ -27,4 +27,4 @@ PGPy>=0.6.0
 #
 # jsonschema: optional runtime validation of Agent Q inner manifest against manifest.schema.json.
 #   Used by: tools/agentq_transport_client/agentq_transport_client/manifest_validate.py
-jsonschema>=4.0
+jsonschema>=4.26.0