diff --git a/run-analysis.sh b/run-analysis.sh
index 1f5c213..e487224 100755
--- a/run-analysis.sh
+++ b/run-analysis.sh
@@ -20,13 +20,13 @@ fi
 
 # Run analysis helpers
 echo "[INFO] Checking for missing domains..."
-python scripts/analyze.py check-missing-domains
+python -m scripts.analyze check-missing-domains
 
 echo "[INFO] Suggesting cache improvements..."
-python scripts/analyze.py suggest-cache
+python -m scripts.analyze suggest-cache
 
 echo "[INFO] Detecting threats..."
-python scripts/analyze.py detect-threats
+python -m scripts.analyze detect-threats
 
 # Deactivate to keep cron environment clean
 if type deactivate >/dev/null 2>&1; then
diff --git a/scripts/__init__.py b/scripts/__init__.py
new file mode 100644
index 0000000..f4c57a1
--- /dev/null
+++ b/scripts/__init__.py
@@ -0,0 +1 @@
+"Utility package for ngxstat scripts"
diff --git a/tests/test_run_analysis.py b/tests/test_run_analysis.py
index 60d2810..66d00df 100644
--- a/tests/test_run_analysis.py
+++ b/tests/test_run_analysis.py
@@ -26,7 +26,7 @@ def test_script_invokes_commands(tmp_path):
 
     lines = calls.read_text().strip().splitlines()
     assert lines == [
-        "scripts/analyze.py check-missing-domains",
-        "scripts/analyze.py suggest-cache",
-        "scripts/analyze.py detect-threats",
+        "-m scripts.analyze check-missing-domains",
+        "-m scripts.analyze suggest-cache",
+        "-m scripts.analyze detect-threats",
     ]