@blamejs/exceptd-skills 0.12.11 → 0.12.15

package/data/_indexes/activity-feed.json

@@ -2,7 +2,7 @@
   "_meta": {
     "schema_version": "1.0.0",
     "note": "Per-artifact 'last changed' feed sorted descending by date. Skill events from manifest.last_threat_review; catalog events from data/<catalog>.json _meta.last_updated.",
-    "event_count": 49
+    "event_count": 50
   },
   "events": [
     {
@@ -13,6 +13,14 @@
       "schema_version": "1.0.0",
       "entry_count": 15
     },
+    {
+      "date": "2026-05-13",
+      "type": "catalog_update",
+      "artifact": "data/attack-techniques.json",
+      "path": "data/attack-techniques.json",
+      "schema_version": "1.0.0",
+      "entry_count": 79
+    },
     {
       "date": "2026-05-13",
       "type": "catalog_update",
@@ -27,7 +35,7 @@
       "artifact": "data/cwe-catalog.json",
       "path": "data/cwe-catalog.json",
       "schema_version": "1.0.0",
-      "entry_count": 53
+      "entry_count": 55
     },
     {
       "date": "2026-05-13",
@@ -341,7 +349,7 @@
       "artifact": "data/exploit-availability.json",
       "path": "data/exploit-availability.json",
       "schema_version": "1.0.0",
-      "entry_count": 5
+      "entry_count": 9
     },
     {
       "date": "2026-05-01",
@@ -349,14 +357,14 @@
       "artifact": "data/framework-control-gaps.json",
       "path": "data/framework-control-gaps.json",
       "schema_version": "1.0.0",
-      "entry_count": 61
+      "entry_count": 62
     },
     {
       "date": "2026-05-01",
       "type": "manifest_review",
       "artifact": "manifest.json",
       "path": "manifest.json",
-      "note": "manifest threat_review_date — 38 skills, 10 catalogs"
+      "note": "manifest threat_review_date — 38 skills, 11 catalogs"
     }
   ]
 }

package/data/_indexes/catalog-summaries.json

@@ -2,7 +2,7 @@
   "_meta": {
     "schema_version": "1.0.0",
     "note": "Per-catalog compact summary so AI consumers can discover available data without loading every _meta block. Purpose strings are curated in scripts/builders/catalog-summaries.js.",
-    "catalog_count": 10
+    "catalog_count": 11
   },
   "catalogs": {
     "atlas-ttps.json": {
@@ -20,11 +20,33 @@
       },
       "entry_count": 15,
       "sample_keys": [
-        "AML.T0043",
         "AML.T0010",
         "AML.T0016",
         "AML.T0017",
-        "AML.T0018"
+        "AML.T0018",
+        "AML.T0020"
+      ]
+    },
+    "attack-techniques.json": {
+      "path": "data/attack-techniques.json",
+      "purpose": null,
+      "schema_version": "1.0.0",
+      "last_updated": "2026-05-13",
+      "tlp": "CLEAR",
+      "source_confidence_default": "A1",
+      "freshness_policy": {
+        "default_review_cadence_days": 90,
+        "stale_after_days": 180,
+        "rebuild_after_days": 365,
+        "note": "Catalog must be rebuilt against the upstream ATT&CK release whenever MITRE publishes a new version. AGENTS.md hard rule #8 requires the bump to be intentional, not silent."
+      },
+      "entry_count": 79,
+      "sample_keys": [
+        "T0001",
+        "T0017",
+        "T0051",
+        "T0096",
+        "T0853"
       ]
     },
     "cve-catalog.json": {
@@ -42,11 +64,11 @@
       },
       "entry_count": 9,
       "sample_keys": [
-        "CVE-2026-31431",
-        "CVE-2026-43284",
-        "CVE-2026-43500",
         "CVE-2025-53773",
-        "CVE-2026-30615"
+        "CVE-2026-30615",
+        "CVE-2026-31431",
+        "CVE-2026-39884",
+        "CVE-2026-42208"
       ]
     },
     "cwe-catalog.json": {
@@ -62,13 +84,13 @@
         "rebuild_after_days": 365,
         "note": "Per-entry last_verified governs decay. Skills depending on this catalog must check entry freshness before high-stakes use."
       },
-      "entry_count": 53,
+      "entry_count": 55,
       "sample_keys": [
-        "CWE-787",
-        "CWE-79",
-        "CWE-89",
-        "CWE-416",
-        "CWE-20"
+        "CWE-20",
+        "CWE-22",
+        "CWE-77",
+        "CWE-78",
+        "CWE-79"
       ]
     },
     "d3fend-catalog.json": {
@@ -128,13 +150,13 @@
         "rebuild_after_days": 365,
         "note": "Per-entry last_verified governs decay. Skills depending on this catalog must check entry freshness before high-stakes use."
       },
-      "entry_count": 5,
+      "entry_count": 9,
       "sample_keys": [
-        "CVE-2026-31431",
-        "CVE-2026-43284",
-        "CVE-2026-43500",
         "CVE-2025-53773",
-        "CVE-2026-30615"
+        "CVE-2026-30615",
+        "CVE-2026-31431",
+        "CVE-2026-39884",
+        "CVE-2026-42208"
       ]
     },
     "framework-control-gaps.json": {
@@ -150,13 +172,13 @@
         "rebuild_after_days": 365,
         "note": "Per-entry last_verified governs decay. Skills depending on this catalog must check entry freshness before high-stakes use."
       },
-      "entry_count": 61,
+      "entry_count": 62,
       "sample_keys": [
-        "NIST-800-53-SI-2",
-        "NIST-800-53-SC-8",
-        "NIST-800-53-AC-2",
-        "NIST-800-53-SI-3",
-        "NIST-800-53-SA-12"
+        "ALL-AI-PIPELINE-INTEGRITY",
+        "ALL-MCP-TOOL-TRUST",
+        "ALL-PROMPT-INJECTION-ACCESS-CONTROL",
+        "AU-Essential-8-App-Hardening",
+        "AU-Essential-8-Backup"
       ]
     },
     "global-frameworks.json": {
@@ -196,11 +218,11 @@
       },
       "entry_count": 31,
       "sample_keys": [
-        "RFC-8446",
-        "DRAFT-IETF-TLS-ECDHE-MLKEM",
-        "DRAFT-IETF-TLS-HYBRID-DESIGN",
-        "RFC-9180",
-        "RFC-9458"
+        "RFC-4301",
+        "RFC-4303",
+        "RFC-6376",
+        "RFC-6545",
+        "RFC-6546"
       ]
     },
     "zeroday-lessons.json": {