@blamejs/exceptd-skills 0.12.24 → 0.12.25

package/data/_indexes/section-offsets.json

@@ -19,102 +19,102 @@
   "skills": {
     "kernel-lpe-triage": {
       "path": "skills/kernel-lpe-triage/skill.md",
-      "total_bytes": 29740,
-      "total_lines": 390,
+      "total_bytes": 30522,
+      "total_lines": 395,
       "frontmatter": {
         "line_start": 1,
-        "line_end": 51,
+        "line_end": 56,
         "byte_start": 0,
-        "byte_end": 957
+        "byte_end": 1739
       },
       "sections": [
         {
           "name": "Threat Context (mid-2026)",
           "normalized_name": "threat-context",
-          "line": 55,
-          "byte_start": 979,
-          "byte_end": 6548,
+          "line": 60,
+          "byte_start": 1761,
+          "byte_end": 7330,
           "bytes": 5569,
           "h3_count": 3
         },
         {
           "name": "Framework Lag Declaration",
           "normalized_name": "framework-lag-declaration",
-          "line": 128,
-          "byte_start": 6548,
-          "byte_end": 9067,
+          "line": 133,
+          "byte_start": 7330,
+          "byte_end": 9849,
           "bytes": 2519,
           "h3_count": 0
         },
         {
           "name": "TTP Mapping (MITRE ATT&CK Enterprise, mid-2026)",
           "normalized_name": "ttp-mapping",
-          "line": 144,
-          "byte_start": 9067,
-          "byte_end": 11984,
+          "line": 149,
+          "byte_start": 9849,
+          "byte_end": 12766,
           "bytes": 2917,
           "h3_count": 0
         },
         {
           "name": "Exploit Availability Matrix",
           "normalized_name": "exploit-availability-matrix",
-          "line": 161,
-          "byte_start": 11984,
-          "byte_end": 12869,
+          "line": 166,
+          "byte_start": 12766,
+          "byte_end": 13651,
           "bytes": 885,
           "h3_count": 0
         },
         {
           "name": "Compliance Theater Check",
           "normalized_name": "compliance-theater-check",
-          "line": 172,
-          "byte_start": 12869,
-          "byte_end": 14941,
+          "line": 177,
+          "byte_start": 13651,
+          "byte_end": 15723,
           "bytes": 2072,
           "h3_count": 0
         },
         {
           "name": "Analysis Procedure",
           "normalized_name": "analysis-procedure",
-          "line": 190,
-          "byte_start": 14941,
-          "byte_end": 20241,
+          "line": 195,
+          "byte_start": 15723,
+          "byte_end": 21023,
           "bytes": 5300,
           "h3_count": 6
         },
         {
           "name": "Output Format",
           "normalized_name": "output-format",
-          "line": 298,
-          "byte_start": 20241,
-          "byte_end": 22037,
+          "line": 303,
+          "byte_start": 21023,
+          "byte_end": 22819,
           "bytes": 1796,
           "h3_count": 7
         },
         {
           "name": "Detection Rules",
           "normalized_name": "detection-rules",
-          "line": 341,
-          "byte_start": 22037,
-          "byte_end": 22726,
+          "line": 346,
+          "byte_start": 22819,
+          "byte_end": 23508,
           "bytes": 689,
           "h3_count": 0
         },
         {
           "name": "Defensive Countermeasure Mapping",
           "normalized_name": "defensive-countermeasure-mapping",
-          "line": 364,
-          "byte_start": 22726,
-          "byte_end": 27471,
+          "line": 369,
+          "byte_start": 23508,
+          "byte_end": 28253,
           "bytes": 4745,
           "h3_count": 0
         },
         {
           "name": "Hand-Off / Related Skills",
           "normalized_name": "hand-off",
-          "line": 381,
-          "byte_start": 27471,
-          "byte_end": 29740,
+          "line": 386,
+          "byte_start": 28253,
+          "byte_end": 30522,
           "bytes": 2269,
           "h3_count": 0
         }
@@ -122,84 +122,84 @@
     },
     "ai-attack-surface": {
       "path": "skills/ai-attack-surface/skill.md",
-      "total_bytes": 22758,
-      "total_lines": 319,
+      "total_bytes": 25250,
+      "total_lines": 328,
       "frontmatter": {
         "line_start": 1,
-        "line_end": 56,
+        "line_end": 65,
         "byte_start": 0,
-        "byte_end": 1102
+        "byte_end": 2804
       },
       "sections": [
         {
           "name": "Threat Context (mid-2026)",
           "normalized_name": "threat-context",
-          "line": 60,
-          "byte_start": 1135,
-          "byte_end": 8373,
-          "bytes": 7238,
+          "line": 69,
+          "byte_start": 2837,
+          "byte_end": 10865,
+          "bytes": 8028,
           "h3_count": 11
         },
         {
           "name": "Framework Lag Declaration",
           "normalized_name": "framework-lag-declaration",
-          "line": 140,
-          "byte_start": 8373,
-          "byte_end": 10838,
+          "line": 149,
+          "byte_start": 10865,
+          "byte_end": 13330,
           "bytes": 2465,
           "h3_count": 0
         },
         {
           "name": "TTP Mapping (MITRE ATLAS v5.1.0)",
           "normalized_name": "ttp-mapping",
-          "line": 157,
-          "byte_start": 10838,
-          "byte_end": 12884,
+          "line": 166,
+          "byte_start": 13330,
+          "byte_end": 15376,
           "bytes": 2046,
           "h3_count": 0
         },
         {
           "name": "Exploit Availability Matrix",
           "normalized_name": "exploit-availability-matrix",
-          "line": 173,
-          "byte_start": 12884,
-          "byte_end": 13510,
+          "line": 182,
+          "byte_start": 15376,
+          "byte_end": 16002,
           "bytes": 626,
           "h3_count": 0
         },
         {
           "name": "Analysis Procedure",
           "normalized_name": "analysis-procedure",
-          "line": 185,
-          "byte_start": 13510,
-          "byte_end": 16837,
+          "line": 194,
+          "byte_start": 16002,
+          "byte_end": 19329,
           "bytes": 3327,
           "h3_count": 6
         },
         {
           "name": "Output Format",
           "normalized_name": "output-format",
-          "line": 255,
-          "byte_start": 16837,
-          "byte_end": 17954,
+          "line": 264,
+          "byte_start": 19329,
+          "byte_end": 20446,
           "bytes": 1117,
           "h3_count": 8
         },
         {
           "name": "Defensive Countermeasure Mapping",
           "normalized_name": "defensive-countermeasure-mapping",
-          "line": 292,
-          "byte_start": 17954,
-          "byte_end": 21672,
+          "line": 301,
+          "byte_start": 20446,
+          "byte_end": 24164,
           "bytes": 3718,
           "h3_count": 0
         },
         {
           "name": "Compliance Theater Check",
           "normalized_name": "compliance-theater-check",
-          "line": 314,
-          "byte_start": 21672,
-          "byte_end": 22758,
+          "line": 323,
+          "byte_start": 24164,
+          "byte_end": 25250,
           "bytes": 1086,
           "h3_count": 0
         }
@@ -207,93 +207,93 @@
     },
     "mcp-agent-trust": {
       "path": "skills/mcp-agent-trust/skill.md",
-      "total_bytes": 26148,
-      "total_lines": 361,
+      "total_bytes": 27437,
+      "total_lines": 366,
       "frontmatter": {
         "line_start": 1,
-        "line_end": 64,
+        "line_end": 69,
         "byte_start": 0,
-        "byte_end": 1145
+        "byte_end": 1980
       },
       "sections": [
         {
           "name": "Threat Context (mid-2026)",
           "normalized_name": "threat-context",
-          "line": 68,
-          "byte_start": 1176,
-          "byte_end": 6184,
-          "bytes": 5008,
+          "line": 73,
+          "byte_start": 2011,
+          "byte_end": 7473,
+          "bytes": 5462,
           "h3_count": 4
         },
         {
           "name": "Framework Lag Declaration",
           "normalized_name": "framework-lag-declaration",
-          "line": 127,
-          "byte_start": 6184,
-          "byte_end": 10021,
+          "line": 132,
+          "byte_start": 7473,
+          "byte_end": 11310,
           "bytes": 3837,
           "h3_count": 0
         },
         {
           "name": "TTP Mapping",
           "normalized_name": "ttp-mapping",
-          "line": 147,
-          "byte_start": 10021,
-          "byte_end": 11257,
+          "line": 152,
+          "byte_start": 11310,
+          "byte_end": 12546,
           "bytes": 1236,
           "h3_count": 0
         },
         {
           "name": "Exploit Availability Matrix",
           "normalized_name": "exploit-availability-matrix",
-          "line": 160,
-          "byte_start": 11257,
-          "byte_end": 14157,
+          "line": 165,
+          "byte_start": 12546,
+          "byte_end": 15446,
           "bytes": 2900,
           "h3_count": 0
         },
         {
           "name": "Analysis Procedure",
           "normalized_name": "analysis-procedure",
-          "line": 176,
-          "byte_start": 14157,
-          "byte_end": 18016,
+          "line": 181,
+          "byte_start": 15446,
+          "byte_end": 19305,
           "bytes": 3859,
           "h3_count": 5
         },
         {
           "name": "Output Format",
           "normalized_name": "output-format",
-          "line": 288,
-          "byte_start": 18016,
-          "byte_end": 18993,
+          "line": 293,
+          "byte_start": 19305,
+          "byte_end": 20282,
           "bytes": 977,
           "h3_count": 7
         },
         {
           "name": "Hand-Off / Related Skills",
           "normalized_name": "hand-off",
-          "line": 321,
-          "byte_start": 18993,
-          "byte_end": 21434,
+          "line": 326,
+          "byte_start": 20282,
+          "byte_end": 22723,
           "bytes": 2441,
           "h3_count": 0
         },
         {
           "name": "Defensive Countermeasure Mapping",
           "normalized_name": "defensive-countermeasure-mapping",
-          "line": 335,
-          "byte_start": 21434,
-          "byte_end": 25635,
+          "line": 340,
+          "byte_start": 22723,
+          "byte_end": 26924,
           "bytes": 4201,
           "h3_count": 0
         },
         {
           "name": "Compliance Theater Check",
           "normalized_name": "compliance-theater-check",
-          "line": 358,
-          "byte_start": 25635,
-          "byte_end": 26148,
+          "line": 363,
+          "byte_start": 26924,
+          "byte_end": 27437,
           "bytes": 513,
           "h3_count": 0
         }
@@ -489,7 +489,7 @@
     },
     "exploit-scoring": {
       "path": "skills/exploit-scoring/skill.md",
-      "total_bytes": 23932,
+      "total_bytes": 24352,
       "total_lines": 357,
       "frontmatter": {
         "line_start": 1,
@@ -512,16 +512,16 @@
           "normalized_name": "threat-context",
           "line": 39,
           "byte_start": 1702,
-          "byte_end": 3691,
-          "bytes": 1989,
+          "byte_end": 4111,
+          "bytes": 2409,
           "h3_count": 0
         },
         {
           "name": "Framework Lag Declaration",
           "normalized_name": "framework-lag-declaration",
           "line": 50,
-          "byte_start": 3691,
-          "byte_end": 6101,
+          "byte_start": 4111,
+          "byte_end": 6521,
           "bytes": 2410,
           "h3_count": 0
         },
@@ -529,8 +529,8 @@
           "name": "TTP Mapping",
           "normalized_name": "ttp-mapping",
           "line": 67,
-          "byte_start": 6101,
-          "byte_end": 7323,
+          "byte_start": 6521,
+          "byte_end": 7743,
           "bytes": 1222,
           "h3_count": 0
         },
@@ -538,8 +538,8 @@
           "name": "Exploit Availability Matrix",
           "normalized_name": "exploit-availability-matrix",
           "line": 82,
-          "byte_start": 7323,
-          "byte_end": 9067,
+          "byte_start": 7743,
+          "byte_end": 9487,
           "bytes": 1744,
           "h3_count": 0
         },
@@ -547,8 +547,8 @@
           "name": "RWEP Formula",
           "normalized_name": "rwep-formula",
           "line": 99,
-          "byte_start": 9067,
-          "byte_end": 11933,
+          "byte_start": 9487,
+          "byte_end": 12353,
           "bytes": 2866,
           "h3_count": 1
         },
@@ -556,8 +556,8 @@
           "name": "Pre-Calculated RWEP Scores",
           "normalized_name": "pre-calculated-rwep-scores",
           "line": 154,
-          "byte_start": 11933,
-          "byte_end": 17649,
+          "byte_start": 12353,
+          "byte_end": 18069,
           "bytes": 5716,
           "h3_count": 5
         },
@@ -565,8 +565,8 @@
           "name": "RWEP vs. CVSS Delta Analysis",
           "normalized_name": "rwep-vs-cvss-delta-analysis",
           "line": 248,
-          "byte_start": 17649,
-          "byte_end": 19158,
+          "byte_start": 18069,
+          "byte_end": 19578,
           "bytes": 1509,
           "h3_count": 0
         },
@@ -574,8 +574,8 @@
           "name": "Analysis Procedure",
           "normalized_name": "analysis-procedure",
           "line": 272,
-          "byte_start": 19158,
-          "byte_end": 20849,
+          "byte_start": 19578,
+          "byte_end": 21269,
           "bytes": 1691,
           "h3_count": 4
         },
@@ -583,8 +583,8 @@
           "name": "Output Format",
           "normalized_name": "output-format",
           "line": 310,
-          "byte_start": 20849,
-          "byte_end": 21903,
+          "byte_start": 21269,
+          "byte_end": 22323,
           "bytes": 1054,
           "h3_count": 4
         },
@@ -592,8 +592,8 @@
           "name": "Compliance Theater Check",
           "normalized_name": "compliance-theater-check",
           "line": 348,
-          "byte_start": 21903,
-          "byte_end": 23932,
+          "byte_start": 22323,
+          "byte_end": 24352,
           "bytes": 2029,
           "h3_count": 0
         }
@@ -601,138 +601,138 @@
     },
     "rag-pipeline-security": {
       "path": "skills/rag-pipeline-security/skill.md",
-      "total_bytes": 30486,
-      "total_lines": 328,
+      "total_bytes": 31195,
+      "total_lines": 330,
       "frontmatter": {
         "line_start": 1,
-        "line_end": 41,
+        "line_end": 43,
         "byte_start": 0,
-        "byte_end": 882
+        "byte_end": 1146
       },
       "sections": [
         {
           "name": "Threat Context (mid-2026)",
           "normalized_name": "threat-context",
-          "line": 45,
-          "byte_start": 919,
-          "byte_end": 1866,
-          "bytes": 947,
+          "line": 47,
+          "byte_start": 1183,
+          "byte_end": 2575,
+          "bytes": 1392,
           "h3_count": 0
         },
         {
           "name": "Attack Class 1: Embedding Manipulation for Data Exfiltration",
           "normalized_name": "attack-class-1-embedding-manipulation-for-data-exfiltration",
-          "line": 65,
-          "byte_start": 1866,
-          "byte_end": 3507,
+          "line": 67,
+          "byte_start": 2575,
+          "byte_end": 4216,
           "bytes": 1641,
           "h3_count": 0
         },
         {
           "name": "Attack Class 2: Vector Store Poisoning",
           "normalized_name": "attack-class-2-vector-store-poisoning",
-          "line": 86,
-          "byte_start": 3507,
-          "byte_end": 5520,
+          "line": 88,
+          "byte_start": 4216,
+          "byte_end": 6229,
           "bytes": 2013,
           "h3_count": 0
         },
         {
           "name": "Attack Class 3: Chunking Exploitation",
           "normalized_name": "attack-class-3-chunking-exploitation",
-          "line": 110,
-          "byte_start": 5520,
-          "byte_end": 6743,
+          "line": 112,
+          "byte_start": 6229,
+          "byte_end": 7452,
           "bytes": 1223,
           "h3_count": 0
         },
         {
           "name": "Attack Class 4: Retrieval Filter Bypass",
           "normalized_name": "attack-class-4-retrieval-filter-bypass",
-          "line": 127,
-          "byte_start": 6743,
-          "byte_end": 7946,
+          "line": 129,
+          "byte_start": 7452,
+          "byte_end": 8655,
           "bytes": 1203,
           "h3_count": 0
         },
         {
           "name": "Attack Class 5: Indirect Prompt Injection via Retrieved Documents",
           "normalized_name": "attack-class-5-indirect-prompt-injection-via-retrieved-documents",
-          "line": 145,
-          "byte_start": 7946,
-          "byte_end": 9624,
+          "line": 147,
+          "byte_start": 8655,
+          "byte_end": 10333,
           "bytes": 1678,
           "h3_count": 0
         },
         {
           "name": "Framework Lag Declaration",
           "normalized_name": "framework-lag-declaration",
-          "line": 166,
-          "byte_start": 9624,
-          "byte_end": 11781,
+          "line": 168,
+          "byte_start": 10333,
+          "byte_end": 12490,
           "bytes": 2157,
           "h3_count": 0
         },
         {
           "name": "TTP Mapping (MITRE ATLAS v5.1.0)",
           "normalized_name": "ttp-mapping",
-          "line": 181,
-          "byte_start": 11781,
-          "byte_end": 15423,
+          "line": 183,
+          "byte_start": 12490,
+          "byte_end": 16132,
           "bytes": 3642,
           "h3_count": 0
         },
         {
           "name": "Exploit Availability Matrix",
           "normalized_name": "exploit-availability-matrix",
-          "line": 195,
-          "byte_start": 15423,
-          "byte_end": 20761,
+          "line": 197,
+          "byte_start": 16132,
+          "byte_end": 21470,
           "bytes": 5338,
           "h3_count": 1
         },
         {
           "name": "Analysis Procedure",
           "normalized_name": "analysis-procedure",
-          "line": 215,
-          "byte_start": 20761,
-          "byte_end": 22481,
+          "line": 217,
+          "byte_start": 21470,
+          "byte_end": 23190,
           "bytes": 1720,
           "h3_count": 4
         },
         {
           "name": "Output Format",
           "normalized_name": "output-format",
-          "line": 257,
-          "byte_start": 22481,
-          "byte_end": 23324,
+          "line": 259,
+          "byte_start": 23190,
+          "byte_end": 24033,
           "bytes": 843,
           "h3_count": 5
         },
         {
           "name": "Hand-Off / Related Skills",
           "normalized_name": "hand-off",
-          "line": 289,
-          "byte_start": 23324,
-          "byte_end": 25963,
+          "line": 291,
+          "byte_start": 24033,
+          "byte_end": 26672,
           "bytes": 2639,
           "h3_count": 0
         },
         {
           "name": "Defensive Countermeasure Mapping",
           "normalized_name": "defensive-countermeasure-mapping",
-          "line": 303,
-          "byte_start": 25963,
-          "byte_end": 29842,
+          "line": 305,
+          "byte_start": 26672,
+          "byte_end": 30551,
           "bytes": 3879,
           "h3_count": 0
         },
         {
           "name": "Compliance Theater Check",
           "normalized_name": "compliance-theater-check",
-          "line": 325,
-          "byte_start": 29842,
-          "byte_end": 30486,
+          "line": 327,
+          "byte_start": 30551,
+          "byte_end": 31195,
           "bytes": 644,
           "h3_count": 0
         }
@@ -740,8 +740,8 @@
     },
     "ai-c2-detection": {
       "path": "skills/ai-c2-detection/skill.md",
-      "total_bytes": 35429,
-      "total_lines": 475,
+      "total_bytes": 36020,
+      "total_lines": 477,
       "frontmatter": {
         "line_start": 1,
         "line_end": 52,
@@ -754,106 +754,106 @@
           "normalized_name": "threat-context",
           "line": 56,
           "byte_start": 961,
-          "byte_end": 5752,
-          "bytes": 4791,
+          "byte_end": 6343,
+          "bytes": 5382,
           "h3_count": 3
         },
         {
           "name": "Framework Lag Declaration",
           "normalized_name": "framework-lag-declaration",
-          "line": 144,
-          "byte_start": 5752,
-          "byte_end": 7238,
+          "line": 146,
+          "byte_start": 6343,
+          "byte_end": 7829,
           "bytes": 1486,
           "h3_count": 0
         },
         {
           "name": "Detection Architecture",
           "normalized_name": "detection-architecture",
-          "line": 157,
-          "byte_start": 7238,
-          "byte_end": 9857,
+          "line": 159,
+          "byte_start": 7829,
+          "byte_end": 10448,
           "bytes": 2619,
           "h3_count": 4
         },
         {
           "name": "Incident Response Playbook — AI C2",
           "normalized_name": "incident-response-playbook-ai-c2",
-          "line": 216,
-          "byte_start": 9857,
-          "byte_end": 12218,
+          "line": 218,
+          "byte_start": 10448,
+          "byte_end": 12809,
           "bytes": 2361,
           "h3_count": 6
         },
         {
           "name": "Detection Rule Examples",
           "normalized_name": "detection-rules",
-          "line": 269,
-          "byte_start": 12218,
-          "byte_end": 13418,
+          "line": 271,
+          "byte_start": 12809,
+          "byte_end": 14009,
           "bytes": 1200,
           "h3_count": 2
         },
         {
           "name": "TTP Mapping (MITRE ATLAS v5.1.0 + MITRE ATT&CK)",
           "normalized_name": "ttp-mapping",
-          "line": 322,
-          "byte_start": 13418,
-          "byte_end": 16853,
+          "line": 324,
+          "byte_start": 14009,
+          "byte_end": 17444,
           "bytes": 3435,
           "h3_count": 0
         },
         {
           "name": "Exploit Availability Matrix",
           "normalized_name": "exploit-availability-matrix",
-          "line": 335,
-          "byte_start": 16853,
-          "byte_end": 22212,
+          "line": 337,
+          "byte_start": 17444,
+          "byte_end": 22803,
           "bytes": 5359,
           "h3_count": 2
         },
         {
           "name": "Analysis Procedure",
           "normalized_name": "analysis-procedure",
-          "line": 358,
-          "byte_start": 22212,
-          "byte_end": 26296,
+          "line": 360,
+          "byte_start": 22803,
+          "byte_end": 26887,
           "bytes": 4084,
           "h3_count": 7
         },
         {
           "name": "Defensive Countermeasure Mapping",
           "normalized_name": "defensive-countermeasure-mapping",
-          "line": 403,
-          "byte_start": 26296,
-          "byte_end": 30238,
+          "line": 405,
+          "byte_start": 26887,
+          "byte_end": 30829,
           "bytes": 3942,
           "h3_count": 0
         },
         {
           "name": "Compliance Theater Check",
           "normalized_name": "compliance-theater-check",
-          "line": 427,
-          "byte_start": 30238,
-          "byte_end": 31628,
+          "line": 429,
+          "byte_start": 30829,
+          "byte_end": 32219,
           "bytes": 1390,
           "h3_count": 0
         },
         {
           "name": "Output Format",
           "normalized_name": "output-format",
-          "line": 433,
-          "byte_start": 31628,
-          "byte_end": 32486,
+          "line": 435,
+          "byte_start": 32219,
+          "byte_end": 33077,
           "bytes": 858,
           "h3_count": 5
         },
         {
           "name": "Hand-Off / Related Skills",
           "normalized_name": "hand-off",
-          "line": 464,
-          "byte_start": 32486,
-          "byte_end": 35429,
+          "line": 466,
+          "byte_start": 33077,
+          "byte_end": 36020,
           "bytes": 2943,
           "h3_count": 0
         }
@@ -1170,7 +1170,7 @@
     },
     "zeroday-gap-learn": {
       "path": "skills/zeroday-gap-learn/skill.md",
-      "total_bytes": 37109,
+      "total_bytes": 37609,
       "total_lines": 444,
       "frontmatter": {
         "line_start": 1,
@@ -1193,16 +1193,16 @@
           "normalized_name": "threat-context",
           "line": 43,
           "byte_start": 1807,
-          "byte_end": 3480,
-          "bytes": 1673,
+          "byte_end": 3980,
+          "bytes": 2173,
           "h3_count": 0
         },
         {
           "name": "Framework Lag Declaration",
           "normalized_name": "framework-lag-declaration",
           "line": 56,
-          "byte_start": 3480,
-          "byte_end": 6025,
+          "byte_start": 3980,
+          "byte_end": 6525,
           "bytes": 2545,
           "h3_count": 0
         },
@@ -1210,8 +1210,8 @@
           "name": "TTP Mapping",
           "normalized_name": "ttp-mapping",
           "line": 74,
-          "byte_start": 6025,
-          "byte_end": 7220,
+          "byte_start": 6525,
+          "byte_end": 7720,
           "bytes": 1195,
           "h3_count": 0
         },
@@ -1219,8 +1219,8 @@
           "name": "Exploit Availability Matrix",
           "normalized_name": "exploit-availability-matrix",
           "line": 89,
-          "byte_start": 7220,
-          "byte_end": 10022,
+          "byte_start": 7720,
+          "byte_end": 10522,
           "bytes": 2802,
           "h3_count": 0
         },
@@ -1228,8 +1228,8 @@
           "name": "The Learning Loop",
           "normalized_name": "the-learning-loop",
           "line": 108,
-          "byte_start": 10022,
-          "byte_end": 11439,
+          "byte_start": 10522,
+          "byte_end": 11939,
           "bytes": 1417,
           "h3_count": 0
         },
@@ -1237,8 +1237,8 @@
           "name": "Pre-Run Lessons (Encoded from Documented Zero-Days)",
           "normalized_name": "pre-run-lessons-encoded-from-documented-zero-days",
           "line": 146,
-          "byte_start": 11439,
-          "byte_end": 32290,
+          "byte_start": 11939,
+          "byte_end": 32790,
           "bytes": 20851,
           "h3_count": 8
         },
@@ -1246,8 +1246,8 @@
           "name": "Analysis Procedure for New Zero-Days",
           "normalized_name": "analysis-procedure",
           "line": 338,
-          "byte_start": 32290,
-          "byte_end": 34412,
+          "byte_start": 32790,
+          "byte_end": 34912,
           "bytes": 2122,
           "h3_count": 6
         },
@@ -1255,8 +1255,8 @@
           "name": "Output Format",
           "normalized_name": "output-format",
           "line": 398,
-          "byte_start": 34412,
-          "byte_end": 35271,
+          "byte_start": 34912,
+          "byte_end": 35771,
           "bytes": 859,
           "h3_count": 7
         },
@@ -1264,8 +1264,8 @@
           "name": "Compliance Theater Check",
           "normalized_name": "compliance-theater-check",
           "line": 435,
-          "byte_start": 35271,
-          "byte_end": 37109,
+          "byte_start": 35771,
+          "byte_end": 37609,
           "bytes": 1838,
           "h3_count": 0
         }
@@ -1784,84 +1784,84 @@
     },
     "attack-surface-pentest": {
       "path": "skills/attack-surface-pentest/skill.md",
-      "total_bytes": 32368,
-      "total_lines": 385,
+      "total_bytes": 32626,
+      "total_lines": 386,
       "frontmatter": {
         "line_start": 1,
-        "line_end": 63,
+        "line_end": 64,
         "byte_start": 0,
-        "byte_end": 1386
+        "byte_end": 1644
       },
       "sections": [
         {
           "name": "Threat Context (mid-2026)",
           "normalized_name": "threat-context",
-          "line": 67,
-          "byte_start": 1438,
-          "byte_end": 6142,
+          "line": 68,
+          "byte_start": 1696,
+          "byte_end": 6400,
           "bytes": 4704,
           "h3_count": 8
         },
         {
           "name": "Framework Lag Declaration",
           "normalized_name": "framework-lag-declaration",
-          "line": 105,
-          "byte_start": 6142,
-          "byte_end": 10703,
+          "line": 106,
+          "byte_start": 6400,
+          "byte_end": 10961,
           "bytes": 4561,
           "h3_count": 0
         },
         {
           "name": "TTP Mapping (MITRE ATLAS v5.1.0 + MITRE ATT&CK v17)",
           "normalized_name": "ttp-mapping",
-          "line": 123,
-          "byte_start": 10703,
-          "byte_end": 12934,
+          "line": 124,
+          "byte_start": 10961,
+          "byte_end": 13192,
           "bytes": 2231,
           "h3_count": 0
         },
         {
           "name": "Exploit Availability Matrix",
           "normalized_name": "exploit-availability-matrix",
-          "line": 142,
-          "byte_start": 12934,
-          "byte_end": 15389,
+          "line": 143,
+          "byte_start": 13192,
+          "byte_end": 15647,
           "bytes": 2455,
           "h3_count": 0
         },
         {
           "name": "Analysis Procedure",
           "normalized_name": "analysis-procedure",
-          "line": 159,
-          "byte_start": 15389,
-          "byte_end": 25092,
+          "line": 160,
+          "byte_start": 15647,
+          "byte_end": 25350,
           "bytes": 9703,
           "h3_count": 4
         },
         {
           "name": "Output Format",
           "normalized_name": "output-format",
-          "line": 280,
-          "byte_start": 25092,
-          "byte_end": 28441,
+          "line": 281,
+          "byte_start": 25350,
+          "byte_end": 28699,
           "bytes": 3349,
           "h3_count": 9
         },
         {
           "name": "Compliance Theater Check",
           "normalized_name": "compliance-theater-check",
-          "line": 360,
-          "byte_start": 28441,
-          "byte_end": 30757,
+          "line": 361,
+          "byte_start": 28699,
+          "byte_end": 31015,
           "bytes": 2316,
           "h3_count": 0
         },
         {
           "name": "Defensive Countermeasure Mapping (D3FEND)",
           "normalized_name": "defensive-countermeasure-mapping",
-          "line": 374,
-          "byte_start": 30757,
-          "byte_end": 32368,
+          "line": 375,
+          "byte_start": 31015,
+          "byte_end": 32626,
           "bytes": 1611,
           "h3_count": 0
         }
@@ -2039,84 +2039,84 @@
     },
     "supply-chain-integrity": {
       "path": "skills/supply-chain-integrity/skill.md",
-      "total_bytes": 39822,
-      "total_lines": 323,
+      "total_bytes": 40261,
+      "total_lines": 325,
       "frontmatter": {
         "line_start": 1,
-        "line_end": 68,
+        "line_end": 70,
         "byte_start": 0,
-        "byte_end": 1862
+        "byte_end": 2301
       },
       "sections": [
         {
           "name": "Threat Context (mid-2026)",
           "normalized_name": "threat-context",
-          "line": 72,
-          "byte_start": 1900,
-          "byte_end": 7366,
+          "line": 74,
+          "byte_start": 2339,
+          "byte_end": 7805,
           "bytes": 5466,
           "h3_count": 0
         },
         {
           "name": "Framework Lag Declaration",
           "normalized_name": "framework-lag-declaration",
-          "line": 91,
-          "byte_start": 7366,
-          "byte_end": 17849,
+          "line": 93,
+          "byte_start": 7805,
+          "byte_end": 18288,
           "bytes": 10483,
           "h3_count": 1
         },
         {
           "name": "TTP Mapping",
           "normalized_name": "ttp-mapping",
-          "line": 136,
-          "byte_start": 17849,
-          "byte_end": 20977,
+          "line": 138,
+          "byte_start": 18288,
+          "byte_end": 21416,
           "bytes": 3128,
           "h3_count": 0
         },
         {
           "name": "Exploit Availability Matrix",
           "normalized_name": "exploit-availability-matrix",
-          "line": 159,
-          "byte_start": 20977,
-          "byte_end": 25558,
+          "line": 161,
+          "byte_start": 21416,
+          "byte_end": 25997,
           "bytes": 4581,
           "h3_count": 0
         },
         {
           "name": "Analysis Procedure",
           "normalized_name": "analysis-procedure",
-          "line": 176,
-          "byte_start": 25558,
-          "byte_end": 33015,
+          "line": 178,
+          "byte_start": 25997,
+          "byte_end": 33454,
           "bytes": 7457,
           "h3_count": 4
         },
         {
           "name": "Output Format",
           "normalized_name": "output-format",
-          "line": 250,
-          "byte_start": 33015,
-          "byte_end": 35117,
+          "line": 252,
+          "byte_start": 33454,
+          "byte_end": 35556,
           "bytes": 2102,
           "h3_count": 9
         },
         {
           "name": "Compliance Theater Check",
           "normalized_name": "compliance-theater-check",
-          "line": 290,
-          "byte_start": 35117,
-          "byte_end": 37405,
+          "line": 292,
+          "byte_start": 35556,
+          "byte_end": 37844,
           "bytes": 2288,
           "h3_count": 0
         },
         {
           "name": "Defensive Countermeasure Mapping",
           "normalized_name": "defensive-countermeasure-mapping",
-          "line": 306,
-          "byte_start": 37405,
-          "byte_end": 39822,
+          "line": 308,
+          "byte_start": 37844,
+          "byte_end": 40261,
           "bytes": 2417,
           "h3_count": 0
         }
@@ -2594,93 +2594,93 @@
     },
     "webapp-security": {
       "path": "skills/webapp-security/skill.md",
-      "total_bytes": 28798,
-      "total_lines": 285,
+      "total_bytes": 29073,
+      "total_lines": 287,
       "frontmatter": {
         "line_start": 1,
-        "line_end": 72,
+        "line_end": 74,
         "byte_start": 0,
-        "byte_end": 1347
+        "byte_end": 1622
       },
       "sections": [
         {
           "name": "Threat Context (mid-2026)",
           "normalized_name": "threat-context",
-          "line": 76,
-          "byte_start": 1387,
-          "byte_end": 4837,
+          "line": 78,
+          "byte_start": 1662,
+          "byte_end": 5112,
           "bytes": 3450,
           "h3_count": 0
         },
         {
           "name": "Framework Lag Declaration",
           "normalized_name": "framework-lag-declaration",
-          "line": 90,
-          "byte_start": 4837,
-          "byte_end": 8398,
+          "line": 92,
+          "byte_start": 5112,
+          "byte_end": 8673,
           "bytes": 3561,
           "h3_count": 0
         },
         {
           "name": "TTP Mapping (MITRE ATT&CK Enterprise + ATLAS v5.1.0)",
           "normalized_name": "ttp-mapping",
-          "line": 110,
-          "byte_start": 8398,
-          "byte_end": 9916,
+          "line": 112,
+          "byte_start": 8673,
+          "byte_end": 10191,
           "bytes": 1518,
           "h3_count": 0
         },
         {
           "name": "Exploit Availability Matrix",
           "normalized_name": "exploit-availability-matrix",
-          "line": 122,
-          "byte_start": 9916,
-          "byte_end": 13362,
+          "line": 124,
+          "byte_start": 10191,
+          "byte_end": 13637,
           "bytes": 3446,
           "h3_count": 0
         },
         {
           "name": "Analysis Procedure",
           "normalized_name": "analysis-procedure",
-          "line": 140,
-          "byte_start": 13362,
-          "byte_end": 19965,
+          "line": 142,
+          "byte_start": 13637,
+          "byte_end": 20240,
           "bytes": 6603,
           "h3_count": 1
         },
         {
           "name": "Output Format",
           "normalized_name": "output-format",
-          "line": 188,
-          "byte_start": 19965,
-          "byte_end": 23107,
+          "line": 190,
+          "byte_start": 20240,
+          "byte_end": 23382,
           "bytes": 3142,
           "h3_count": 6
         },
         {
           "name": "Compliance Theater Check",
           "normalized_name": "compliance-theater-check",
-          "line": 247,
-          "byte_start": 23107,
-          "byte_end": 25084,
+          "line": 249,
+          "byte_start": 23382,
+          "byte_end": 25359,
           "bytes": 1977,
           "h3_count": 0
         },
         {
           "name": "Defensive Countermeasure Mapping",
           "normalized_name": "defensive-countermeasure-mapping",
-          "line": 261,
-          "byte_start": 25084,
-          "byte_end": 27603,
+          "line": 263,
+          "byte_start": 25359,
+          "byte_end": 27878,
           "bytes": 2519,
           "h3_count": 0
         },
         {
           "name": "Hand-Off / Related Skills",
           "normalized_name": "hand-off",
-          "line": 275,
-          "byte_start": 27603,
-          "byte_end": 28798,
+          "line": 277,
+          "byte_start": 27878,
+          "byte_end": 29073,
           "bytes": 1195,
           "h3_count": 0
         }
@@ -2688,8 +2688,8 @@
     },
     "ai-risk-management": {
       "path": "skills/ai-risk-management/skill.md",
-      "total_bytes": 34005,
-      "total_lines": 316,
+      "total_bytes": 34702,
+      "total_lines": 318,
       "frontmatter": {
         "line_start": 1,
         "line_end": 46,
@@ -2711,79 +2711,79 @@
           "normalized_name": "threat-context",
           "line": 58,
           "byte_start": 1915,
-          "byte_end": 5581,
-          "bytes": 3666,
+          "byte_end": 6278,
+          "bytes": 4363,
           "h3_count": 0
         },
         {
           "name": "Framework Lag Declaration",
           "normalized_name": "framework-lag-declaration",
-          "line": 84,
-          "byte_start": 5581,
-          "byte_end": 10867,
+          "line": 86,
+          "byte_start": 6278,
+          "byte_end": 11564,
           "bytes": 5286,
           "h3_count": 0
         },
         {
           "name": "TTP Mapping",
           "normalized_name": "ttp-mapping",
-          "line": 108,
-          "byte_start": 10867,
-          "byte_end": 13438,
+          "line": 110,
+          "byte_start": 11564,
+          "byte_end": 14135,
           "bytes": 2571,
           "h3_count": 0
         },
         {
           "name": "Exploit Availability Matrix",
           "normalized_name": "exploit-availability-matrix",
-          "line": 130,
-          "byte_start": 13438,
-          "byte_end": 15904,
+          "line": 132,
+          "byte_start": 14135,
+          "byte_end": 16601,
           "bytes": 2466,
           "h3_count": 0
         },
         {
           "name": "Analysis Procedure",
           "normalized_name": "analysis-procedure",
-          "line": 147,
-          "byte_start": 15904,
-          "byte_end": 24568,
+          "line": 149,
+          "byte_start": 16601,
+          "byte_end": 25265,
           "bytes": 8664,
           "h3_count": 10
         },
         {
           "name": "Output Format",
           "normalized_name": "output-format",
-          "line": 217,
-          "byte_start": 24568,
-          "byte_end": 27428,
+          "line": 219,
+          "byte_start": 25265,
+          "byte_end": 28125,
           "bytes": 2860,
           "h3_count": 10
         },
         {
           "name": "Compliance Theater Check",
           "normalized_name": "compliance-theater-check",
-          "line": 271,
-          "byte_start": 27428,
-          "byte_end": 30227,
+          "line": 273,
+          "byte_start": 28125,
+          "byte_end": 30924,
           "bytes": 2799,
           "h3_count": 0
         },
         {
           "name": "Defensive Countermeasure Mapping",
           "normalized_name": "defensive-countermeasure-mapping",
-          "line": 289,
-          "byte_start": 30227,
-          "byte_end": 32014,
+          "line": 291,
+          "byte_start": 30924,
+          "byte_end": 32711,
           "bytes": 1787,
           "h3_count": 0
         },
         {
           "name": "Hand-Off / Related Skills",
           "normalized_name": "hand-off",
-          "line": 303,
-          "byte_start": 32014,
-          "byte_end": 34005,
+          "line": 305,
+          "byte_start": 32711,
+          "byte_end": 34702,
           "bytes": 1991,
           "h3_count": 0
         }
@@ -3167,93 +3167,93 @@
     },
     "api-security": {
       "path": "skills/api-security/skill.md",
-      "total_bytes": 34862,
-      "total_lines": 291,
+      "total_bytes": 35524,
+      "total_lines": 295,
       "frontmatter": {
         "line_start": 1,
-        "line_end": 67,
+        "line_end": 71,
         "byte_start": 0,
-        "byte_end": 1291
+        "byte_end": 1953
       },
       "sections": [
         {
           "name": "Threat Context (mid-2026)",
           "normalized_name": "threat-context",
-          "line": 71,
-          "byte_start": 1319,
-          "byte_end": 6499,
+          "line": 75,
+          "byte_start": 1981,
+          "byte_end": 7161,
           "bytes": 5180,
           "h3_count": 0
         },
         {
           "name": "Framework Lag Declaration",
           "normalized_name": "framework-lag-declaration",
-          "line": 97,
-          "byte_start": 6499,
-          "byte_end": 9777,
+          "line": 101,
+          "byte_start": 7161,
+          "byte_end": 10439,
           "bytes": 3278,
           "h3_count": 0
         },
         {
           "name": "TTP Mapping (MITRE ATT&CK Enterprise + ATLAS v5.1.0)",
           "normalized_name": "ttp-mapping",
-          "line": 120,
-          "byte_start": 9777,
-          "byte_end": 12076,
+          "line": 124,
+          "byte_start": 10439,
+          "byte_end": 12738,
           "bytes": 2299,
           "h3_count": 0
         },
         {
           "name": "Exploit Availability Matrix",
           "normalized_name": "exploit-availability-matrix",
-          "line": 134,
-          "byte_start": 12076,
-          "byte_end": 16544,
+          "line": 138,
+          "byte_start": 12738,
+          "byte_end": 17206,
           "bytes": 4468,
           "h3_count": 0
         },
         {
           "name": "Analysis Procedure",
           "normalized_name": "analysis-procedure",
-          "line": 154,
-          "byte_start": 16544,
-          "byte_end": 24343,
+          "line": 158,
+          "byte_start": 17206,
+          "byte_end": 25005,
           "bytes": 7799,
           "h3_count": 1
         },
         {
           "name": "Output Format",
           "normalized_name": "output-format",
-          "line": 202,
-          "byte_start": 24343,
-          "byte_end": 28061,
+          "line": 206,
+          "byte_start": 25005,
+          "byte_end": 28723,
           "bytes": 3718,
           "h3_count": 9
         },
         {
           "name": "Compliance Theater Check",
           "normalized_name": "compliance-theater-check",
-          "line": 255,
-          "byte_start": 28061,
-          "byte_end": 30419,
+          "line": 259,
+          "byte_start": 28723,
+          "byte_end": 31081,
           "bytes": 2358,
           "h3_count": 0
         },
         {
           "name": "Defensive Countermeasure Mapping",
           "normalized_name": "defensive-countermeasure-mapping",
-          "line": 269,
-          "byte_start": 30419,
-          "byte_end": 33657,
+          "line": 273,
+          "byte_start": 31081,
+          "byte_end": 34319,
           "bytes": 3238,
           "h3_count": 0
         },
         {
           "name": "Hand-Off / Related Skills",
           "normalized_name": "hand-off",
-          "line": 283,
-          "byte_start": 33657,
-          "byte_end": 34862,
+          "line": 287,
+          "byte_start": 34319,
+          "byte_end": 35524,
           "bytes": 1205,
           "h3_count": 0
         }
@@ -3355,93 +3355,93 @@
     },
     "container-runtime-security": {
       "path": "skills/container-runtime-security/skill.md",
-      "total_bytes": 48840,
-      "total_lines": 383,
+      "total_bytes": 49104,
+      "total_lines": 385,
       "frontmatter": {
         "line_start": 1,
-        "line_end": 61,
+        "line_end": 63,
         "byte_start": 0,
-        "byte_end": 1232
+        "byte_end": 1496
       },
       "sections": [
         {
           "name": "Threat Context (mid-2026)",
           "normalized_name": "threat-context",
-          "line": 65,
-          "byte_start": 1287,
-          "byte_end": 6810,
+          "line": 67,
+          "byte_start": 1551,
+          "byte_end": 7074,
           "bytes": 5523,
           "h3_count": 0
         },
         {
           "name": "Framework Lag Declaration",
           "normalized_name": "framework-lag-declaration",
-          "line": 92,
-          "byte_start": 6810,
-          "byte_end": 13222,
+          "line": 94,
+          "byte_start": 7074,
+          "byte_end": 13486,
           "bytes": 6412,
           "h3_count": 0
         },
         {
           "name": "TTP Mapping",
           "normalized_name": "ttp-mapping",
-          "line": 119,
-          "byte_start": 13222,
-          "byte_end": 17697,
+          "line": 121,
+          "byte_start": 13486,
+          "byte_end": 17961,
           "bytes": 4475,
           "h3_count": 0
         },
         {
           "name": "Exploit Availability Matrix",
           "normalized_name": "exploit-availability-matrix",
-          "line": 143,
-          "byte_start": 17697,
-          "byte_end": 21700,
+          "line": 145,
+          "byte_start": 17961,
+          "byte_end": 21964,
           "bytes": 4003,
           "h3_count": 0
         },
         {
           "name": "Analysis Procedure",
           "normalized_name": "analysis-procedure",
-          "line": 160,
-          "byte_start": 21700,
-          "byte_end": 32558,
+          "line": 162,
+          "byte_start": 21964,
+          "byte_end": 32822,
           "bytes": 10858,
           "h3_count": 5
         },
         {
           "name": "Output Format",
           "normalized_name": "output-format",
-          "line": 246,
-          "byte_start": 32558,
-          "byte_end": 35477,
+          "line": 248,
+          "byte_start": 32822,
+          "byte_end": 35741,
           "bytes": 2919,
           "h3_count": 12
         },
         {
           "name": "Compliance Theater Check",
           "normalized_name": "compliance-theater-check",
-          "line": 312,
-          "byte_start": 35477,
-          "byte_end": 38974,
+          "line": 314,
+          "byte_start": 35741,
+          "byte_end": 39238,
           "bytes": 3497,
           "h3_count": 0
         },
         {
           "name": "Defensive Countermeasure Mapping",
           "normalized_name": "defensive-countermeasure-mapping",
-          "line": 348,
-          "byte_start": 38974,
-          "byte_end": 44246,
+          "line": 350,
+          "byte_start": 39238,
+          "byte_end": 44510,
           "bytes": 5272,
           "h3_count": 0
         },
         {
           "name": "Hand-Off / Related Skills",
           "normalized_name": "hand-off",
-          "line": 365,
-          "byte_start": 44246,
-          "byte_end": 48840,
+          "line": 367,
+          "byte_start": 44510,
+          "byte_end": 49104,
           "bytes": 4594,
           "h3_count": 0
         }