diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 5f71b9b..e5dc323 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -29,12 +29,19 @@ jobs:
       - name: Install dependencies
         run: npm ci
 
+      - name: Security audit
+        run: npm audit --audit-level=moderate
+        continue-on-error: true
+
       - name: Lint
         run: npm run lint
 
       - name: Build
         run: npm run build
 
+      - name: Verify build output
+        run: test -f dist/cli.js && echo "dist/cli.js exists" || (echo "Build did not produce dist/cli.js" && exit 1)
+
       - name: Check types
         run: npx tsc --noEmit