diff --git a/skills/remove-ai-marks/scripts/requirements-markllm.txt b/skills/remove-ai-marks/scripts/requirements-markllm.txt
index bb92884..12f73cc 100644
--- a/skills/remove-ai-marks/scripts/requirements-markllm.txt
+++ b/skills/remove-ai-marks/scripts/requirements-markllm.txt
@@ -28,7 +28,7 @@ jieba==0.42.1
 tqdm==4.70.0
 matplotlib==3.11.1
 Cython==3.3.0
-numpy==2.5.2
+numpy==2.5.3
 scipy==1.18.1
 huggingface_hub==1.30.0
 Pillow==12.3.0
diff --git a/skills/remove-ai-marks/scripts/requirements-synthid-scorer.txt b/skills/remove-ai-marks/scripts/requirements-synthid-scorer.txt
index a1bc1ba..dfd8e4e 100644
--- a/skills/remove-ai-marks/scripts/requirements-synthid-scorer.txt
+++ b/skills/remove-ai-marks/scripts/requirements-synthid-scorer.txt
@@ -9,7 +9,7 @@
 # Pillow was bumped 10.4.0 -> 12.3.0 for PYSEC-2026-165/2249-2257/2874/3451-3456
 # (24 known CVEs, e.g. CVE-2026-* image parsing). The pinned upstream commit
 # (b1108367) only uses stable Pillow APIs (Image.fromarray/open/convert).
-numpy==2.5.2
+numpy==2.5.3
 scipy==1.18.1
 opencv-python==5.0.0.93
 PyWavelets==1.9.0