@blamejs/exceptd-skills 0.12.24 → 0.12.26

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (51) hide show
  1. package/AGENTS.md +12 -4
  2. package/CHANGELOG.md +127 -0
  3. package/data/_indexes/_meta.json +44 -43
  4. package/data/_indexes/activity-feed.json +54 -47
  5. package/data/_indexes/catalog-summaries.json +20 -20
  6. package/data/_indexes/chains.json +561 -6
  7. package/data/_indexes/currency.json +19 -10
  8. package/data/_indexes/frequency.json +207 -55
  9. package/data/_indexes/handoff-dag.json +4 -0
  10. package/data/_indexes/jurisdiction-clocks.json +2 -2
  11. package/data/_indexes/jurisdiction-map.json +25 -12
  12. package/data/_indexes/section-offsets.json +490 -396
  13. package/data/_indexes/stale-content.json +14 -2
  14. package/data/_indexes/summary-cards.json +57 -3
  15. package/data/_indexes/token-budget.json +129 -74
  16. package/data/_indexes/trigger-table.json +66 -0
  17. package/data/_indexes/xref.json +58 -8
  18. package/data/atlas-ttps.json +528 -19
  19. package/data/attack-techniques.json +198 -84
  20. package/data/cve-catalog.json +1309 -9
  21. package/data/exploit-availability.json +300 -10
  22. package/data/framework-control-gaps.json +557 -1
  23. package/data/global-frameworks.json +44 -19
  24. package/data/rfc-references.json +94 -1
  25. package/data/zeroday-lessons.json +475 -13
  26. package/lib/schemas/cve-catalog.schema.json +24 -3
  27. package/manifest-snapshot.json +68 -2
  28. package/manifest-snapshot.sha256 +1 -1
  29. package/manifest.json +145 -59
  30. package/package.json +1 -1
  31. package/sbom.cdx.json +7 -7
  32. package/skills/ai-attack-surface/skill.md +11 -2
  33. package/skills/ai-c2-detection/skill.md +3 -1
  34. package/skills/ai-risk-management/skill.md +3 -1
  35. package/skills/api-security/skill.md +4 -0
  36. package/skills/attack-surface-pentest/skill.md +1 -0
  37. package/skills/container-runtime-security/skill.md +3 -1
  38. package/skills/dlp-gap-analysis/skill.md +1 -1
  39. package/skills/exploit-scoring/skill.md +2 -2
  40. package/skills/incident-response-playbook/skill.md +1 -1
  41. package/skills/kernel-lpe-triage/skill.md +6 -1
  42. package/skills/mcp-agent-trust/skill.md +7 -2
  43. package/skills/mlops-security/skill.md +1 -1
  44. package/skills/rag-pipeline-security/skill.md +4 -2
  45. package/skills/sector-financial/skill.md +1 -1
  46. package/skills/sector-telecom/skill.md +259 -0
  47. package/skills/skill-update-loop/skill.md +1 -1
  48. package/skills/supply-chain-integrity/skill.md +3 -1
  49. package/skills/threat-model-currency/skill.md +1 -1
  50. package/skills/webapp-security/skill.md +2 -0
  51. package/skills/zeroday-gap-learn/skill.md +2 -2
@@ -19,102 +19,102 @@
19
19
  "skills": {
20
20
  "kernel-lpe-triage": {
21
21
  "path": "skills/kernel-lpe-triage/skill.md",
22
- "total_bytes": 29740,
23
- "total_lines": 390,
22
+ "total_bytes": 30522,
23
+ "total_lines": 395,
24
24
  "frontmatter": {
25
25
  "line_start": 1,
26
- "line_end": 51,
26
+ "line_end": 56,
27
27
  "byte_start": 0,
28
- "byte_end": 957
28
+ "byte_end": 1739
29
29
  },
30
30
  "sections": [
31
31
  {
32
32
  "name": "Threat Context (mid-2026)",
33
33
  "normalized_name": "threat-context",
34
- "line": 55,
35
- "byte_start": 979,
36
- "byte_end": 6548,
34
+ "line": 60,
35
+ "byte_start": 1761,
36
+ "byte_end": 7330,
37
37
  "bytes": 5569,
38
38
  "h3_count": 3
39
39
  },
40
40
  {
41
41
  "name": "Framework Lag Declaration",
42
42
  "normalized_name": "framework-lag-declaration",
43
- "line": 128,
44
- "byte_start": 6548,
45
- "byte_end": 9067,
43
+ "line": 133,
44
+ "byte_start": 7330,
45
+ "byte_end": 9849,
46
46
  "bytes": 2519,
47
47
  "h3_count": 0
48
48
  },
49
49
  {
50
50
  "name": "TTP Mapping (MITRE ATT&CK Enterprise, mid-2026)",
51
51
  "normalized_name": "ttp-mapping",
52
- "line": 144,
53
- "byte_start": 9067,
54
- "byte_end": 11984,
52
+ "line": 149,
53
+ "byte_start": 9849,
54
+ "byte_end": 12766,
55
55
  "bytes": 2917,
56
56
  "h3_count": 0
57
57
  },
58
58
  {
59
59
  "name": "Exploit Availability Matrix",
60
60
  "normalized_name": "exploit-availability-matrix",
61
- "line": 161,
62
- "byte_start": 11984,
63
- "byte_end": 12869,
61
+ "line": 166,
62
+ "byte_start": 12766,
63
+ "byte_end": 13651,
64
64
  "bytes": 885,
65
65
  "h3_count": 0
66
66
  },
67
67
  {
68
68
  "name": "Compliance Theater Check",
69
69
  "normalized_name": "compliance-theater-check",
70
- "line": 172,
71
- "byte_start": 12869,
72
- "byte_end": 14941,
70
+ "line": 177,
71
+ "byte_start": 13651,
72
+ "byte_end": 15723,
73
73
  "bytes": 2072,
74
74
  "h3_count": 0
75
75
  },
76
76
  {
77
77
  "name": "Analysis Procedure",
78
78
  "normalized_name": "analysis-procedure",
79
- "line": 190,
80
- "byte_start": 14941,
81
- "byte_end": 20241,
79
+ "line": 195,
80
+ "byte_start": 15723,
81
+ "byte_end": 21023,
82
82
  "bytes": 5300,
83
83
  "h3_count": 6
84
84
  },
85
85
  {
86
86
  "name": "Output Format",
87
87
  "normalized_name": "output-format",
88
- "line": 298,
89
- "byte_start": 20241,
90
- "byte_end": 22037,
88
+ "line": 303,
89
+ "byte_start": 21023,
90
+ "byte_end": 22819,
91
91
  "bytes": 1796,
92
92
  "h3_count": 7
93
93
  },
94
94
  {
95
95
  "name": "Detection Rules",
96
96
  "normalized_name": "detection-rules",
97
- "line": 341,
98
- "byte_start": 22037,
99
- "byte_end": 22726,
97
+ "line": 346,
98
+ "byte_start": 22819,
99
+ "byte_end": 23508,
100
100
  "bytes": 689,
101
101
  "h3_count": 0
102
102
  },
103
103
  {
104
104
  "name": "Defensive Countermeasure Mapping",
105
105
  "normalized_name": "defensive-countermeasure-mapping",
106
- "line": 364,
107
- "byte_start": 22726,
108
- "byte_end": 27471,
106
+ "line": 369,
107
+ "byte_start": 23508,
108
+ "byte_end": 28253,
109
109
  "bytes": 4745,
110
110
  "h3_count": 0
111
111
  },
112
112
  {
113
113
  "name": "Hand-Off / Related Skills",
114
114
  "normalized_name": "hand-off",
115
- "line": 381,
116
- "byte_start": 27471,
117
- "byte_end": 29740,
115
+ "line": 386,
116
+ "byte_start": 28253,
117
+ "byte_end": 30522,
118
118
  "bytes": 2269,
119
119
  "h3_count": 0
120
120
  }
@@ -122,84 +122,84 @@
122
122
  },
123
123
  "ai-attack-surface": {
124
124
  "path": "skills/ai-attack-surface/skill.md",
125
- "total_bytes": 22758,
126
- "total_lines": 319,
125
+ "total_bytes": 25250,
126
+ "total_lines": 328,
127
127
  "frontmatter": {
128
128
  "line_start": 1,
129
- "line_end": 56,
129
+ "line_end": 65,
130
130
  "byte_start": 0,
131
- "byte_end": 1102
131
+ "byte_end": 2804
132
132
  },
133
133
  "sections": [
134
134
  {
135
135
  "name": "Threat Context (mid-2026)",
136
136
  "normalized_name": "threat-context",
137
- "line": 60,
138
- "byte_start": 1135,
139
- "byte_end": 8373,
140
- "bytes": 7238,
137
+ "line": 69,
138
+ "byte_start": 2837,
139
+ "byte_end": 10865,
140
+ "bytes": 8028,
141
141
  "h3_count": 11
142
142
  },
143
143
  {
144
144
  "name": "Framework Lag Declaration",
145
145
  "normalized_name": "framework-lag-declaration",
146
- "line": 140,
147
- "byte_start": 8373,
148
- "byte_end": 10838,
146
+ "line": 149,
147
+ "byte_start": 10865,
148
+ "byte_end": 13330,
149
149
  "bytes": 2465,
150
150
  "h3_count": 0
151
151
  },
152
152
  {
153
153
  "name": "TTP Mapping (MITRE ATLAS v5.1.0)",
154
154
  "normalized_name": "ttp-mapping",
155
- "line": 157,
156
- "byte_start": 10838,
157
- "byte_end": 12884,
155
+ "line": 166,
156
+ "byte_start": 13330,
157
+ "byte_end": 15376,
158
158
  "bytes": 2046,
159
159
  "h3_count": 0
160
160
  },
161
161
  {
162
162
  "name": "Exploit Availability Matrix",
163
163
  "normalized_name": "exploit-availability-matrix",
164
- "line": 173,
165
- "byte_start": 12884,
166
- "byte_end": 13510,
164
+ "line": 182,
165
+ "byte_start": 15376,
166
+ "byte_end": 16002,
167
167
  "bytes": 626,
168
168
  "h3_count": 0
169
169
  },
170
170
  {
171
171
  "name": "Analysis Procedure",
172
172
  "normalized_name": "analysis-procedure",
173
- "line": 185,
174
- "byte_start": 13510,
175
- "byte_end": 16837,
173
+ "line": 194,
174
+ "byte_start": 16002,
175
+ "byte_end": 19329,
176
176
  "bytes": 3327,
177
177
  "h3_count": 6
178
178
  },
179
179
  {
180
180
  "name": "Output Format",
181
181
  "normalized_name": "output-format",
182
- "line": 255,
183
- "byte_start": 16837,
184
- "byte_end": 17954,
182
+ "line": 264,
183
+ "byte_start": 19329,
184
+ "byte_end": 20446,
185
185
  "bytes": 1117,
186
186
  "h3_count": 8
187
187
  },
188
188
  {
189
189
  "name": "Defensive Countermeasure Mapping",
190
190
  "normalized_name": "defensive-countermeasure-mapping",
191
- "line": 292,
192
- "byte_start": 17954,
193
- "byte_end": 21672,
191
+ "line": 301,
192
+ "byte_start": 20446,
193
+ "byte_end": 24164,
194
194
  "bytes": 3718,
195
195
  "h3_count": 0
196
196
  },
197
197
  {
198
198
  "name": "Compliance Theater Check",
199
199
  "normalized_name": "compliance-theater-check",
200
- "line": 314,
201
- "byte_start": 21672,
202
- "byte_end": 22758,
200
+ "line": 323,
201
+ "byte_start": 24164,
202
+ "byte_end": 25250,
203
203
  "bytes": 1086,
204
204
  "h3_count": 0
205
205
  }
@@ -207,93 +207,93 @@
207
207
  },
208
208
  "mcp-agent-trust": {
209
209
  "path": "skills/mcp-agent-trust/skill.md",
210
- "total_bytes": 26148,
211
- "total_lines": 361,
210
+ "total_bytes": 27437,
211
+ "total_lines": 366,
212
212
  "frontmatter": {
213
213
  "line_start": 1,
214
- "line_end": 64,
214
+ "line_end": 69,
215
215
  "byte_start": 0,
216
- "byte_end": 1145
216
+ "byte_end": 1980
217
217
  },
218
218
  "sections": [
219
219
  {
220
220
  "name": "Threat Context (mid-2026)",
221
221
  "normalized_name": "threat-context",
222
- "line": 68,
223
- "byte_start": 1176,
224
- "byte_end": 6184,
225
- "bytes": 5008,
222
+ "line": 73,
223
+ "byte_start": 2011,
224
+ "byte_end": 7473,
225
+ "bytes": 5462,
226
226
  "h3_count": 4
227
227
  },
228
228
  {
229
229
  "name": "Framework Lag Declaration",
230
230
  "normalized_name": "framework-lag-declaration",
231
- "line": 127,
232
- "byte_start": 6184,
233
- "byte_end": 10021,
231
+ "line": 132,
232
+ "byte_start": 7473,
233
+ "byte_end": 11310,
234
234
  "bytes": 3837,
235
235
  "h3_count": 0
236
236
  },
237
237
  {
238
238
  "name": "TTP Mapping",
239
239
  "normalized_name": "ttp-mapping",
240
- "line": 147,
241
- "byte_start": 10021,
242
- "byte_end": 11257,
240
+ "line": 152,
241
+ "byte_start": 11310,
242
+ "byte_end": 12546,
243
243
  "bytes": 1236,
244
244
  "h3_count": 0
245
245
  },
246
246
  {
247
247
  "name": "Exploit Availability Matrix",
248
248
  "normalized_name": "exploit-availability-matrix",
249
- "line": 160,
250
- "byte_start": 11257,
251
- "byte_end": 14157,
249
+ "line": 165,
250
+ "byte_start": 12546,
251
+ "byte_end": 15446,
252
252
  "bytes": 2900,
253
253
  "h3_count": 0
254
254
  },
255
255
  {
256
256
  "name": "Analysis Procedure",
257
257
  "normalized_name": "analysis-procedure",
258
- "line": 176,
259
- "byte_start": 14157,
260
- "byte_end": 18016,
258
+ "line": 181,
259
+ "byte_start": 15446,
260
+ "byte_end": 19305,
261
261
  "bytes": 3859,
262
262
  "h3_count": 5
263
263
  },
264
264
  {
265
265
  "name": "Output Format",
266
266
  "normalized_name": "output-format",
267
- "line": 288,
268
- "byte_start": 18016,
269
- "byte_end": 18993,
267
+ "line": 293,
268
+ "byte_start": 19305,
269
+ "byte_end": 20282,
270
270
  "bytes": 977,
271
271
  "h3_count": 7
272
272
  },
273
273
  {
274
274
  "name": "Hand-Off / Related Skills",
275
275
  "normalized_name": "hand-off",
276
- "line": 321,
277
- "byte_start": 18993,
278
- "byte_end": 21434,
276
+ "line": 326,
277
+ "byte_start": 20282,
278
+ "byte_end": 22723,
279
279
  "bytes": 2441,
280
280
  "h3_count": 0
281
281
  },
282
282
  {
283
283
  "name": "Defensive Countermeasure Mapping",
284
284
  "normalized_name": "defensive-countermeasure-mapping",
285
- "line": 335,
286
- "byte_start": 21434,
287
- "byte_end": 25635,
285
+ "line": 340,
286
+ "byte_start": 22723,
287
+ "byte_end": 26924,
288
288
  "bytes": 4201,
289
289
  "h3_count": 0
290
290
  },
291
291
  {
292
292
  "name": "Compliance Theater Check",
293
293
  "normalized_name": "compliance-theater-check",
294
- "line": 358,
295
- "byte_start": 25635,
296
- "byte_end": 26148,
294
+ "line": 363,
295
+ "byte_start": 26924,
296
+ "byte_end": 27437,
297
297
  "bytes": 513,
298
298
  "h3_count": 0
299
299
  }
@@ -489,7 +489,7 @@
489
489
  },
490
490
  "exploit-scoring": {
491
491
  "path": "skills/exploit-scoring/skill.md",
492
- "total_bytes": 23932,
492
+ "total_bytes": 24352,
493
493
  "total_lines": 357,
494
494
  "frontmatter": {
495
495
  "line_start": 1,
@@ -512,16 +512,16 @@
512
512
  "normalized_name": "threat-context",
513
513
  "line": 39,
514
514
  "byte_start": 1702,
515
- "byte_end": 3691,
516
- "bytes": 1989,
515
+ "byte_end": 4111,
516
+ "bytes": 2409,
517
517
  "h3_count": 0
518
518
  },
519
519
  {
520
520
  "name": "Framework Lag Declaration",
521
521
  "normalized_name": "framework-lag-declaration",
522
522
  "line": 50,
523
- "byte_start": 3691,
524
- "byte_end": 6101,
523
+ "byte_start": 4111,
524
+ "byte_end": 6521,
525
525
  "bytes": 2410,
526
526
  "h3_count": 0
527
527
  },
@@ -529,8 +529,8 @@
529
529
  "name": "TTP Mapping",
530
530
  "normalized_name": "ttp-mapping",
531
531
  "line": 67,
532
- "byte_start": 6101,
533
- "byte_end": 7323,
532
+ "byte_start": 6521,
533
+ "byte_end": 7743,
534
534
  "bytes": 1222,
535
535
  "h3_count": 0
536
536
  },
@@ -538,8 +538,8 @@
538
538
  "name": "Exploit Availability Matrix",
539
539
  "normalized_name": "exploit-availability-matrix",
540
540
  "line": 82,
541
- "byte_start": 7323,
542
- "byte_end": 9067,
541
+ "byte_start": 7743,
542
+ "byte_end": 9487,
543
543
  "bytes": 1744,
544
544
  "h3_count": 0
545
545
  },
@@ -547,8 +547,8 @@
547
547
  "name": "RWEP Formula",
548
548
  "normalized_name": "rwep-formula",
549
549
  "line": 99,
550
- "byte_start": 9067,
551
- "byte_end": 11933,
550
+ "byte_start": 9487,
551
+ "byte_end": 12353,
552
552
  "bytes": 2866,
553
553
  "h3_count": 1
554
554
  },
@@ -556,8 +556,8 @@
556
556
  "name": "Pre-Calculated RWEP Scores",
557
557
  "normalized_name": "pre-calculated-rwep-scores",
558
558
  "line": 154,
559
- "byte_start": 11933,
560
- "byte_end": 17649,
559
+ "byte_start": 12353,
560
+ "byte_end": 18069,
561
561
  "bytes": 5716,
562
562
  "h3_count": 5
563
563
  },
@@ -565,8 +565,8 @@
565
565
  "name": "RWEP vs. CVSS Delta Analysis",
566
566
  "normalized_name": "rwep-vs-cvss-delta-analysis",
567
567
  "line": 248,
568
- "byte_start": 17649,
569
- "byte_end": 19158,
568
+ "byte_start": 18069,
569
+ "byte_end": 19578,
570
570
  "bytes": 1509,
571
571
  "h3_count": 0
572
572
  },
@@ -574,8 +574,8 @@
574
574
  "name": "Analysis Procedure",
575
575
  "normalized_name": "analysis-procedure",
576
576
  "line": 272,
577
- "byte_start": 19158,
578
- "byte_end": 20849,
577
+ "byte_start": 19578,
578
+ "byte_end": 21269,
579
579
  "bytes": 1691,
580
580
  "h3_count": 4
581
581
  },
@@ -583,8 +583,8 @@
583
583
  "name": "Output Format",
584
584
  "normalized_name": "output-format",
585
585
  "line": 310,
586
- "byte_start": 20849,
587
- "byte_end": 21903,
586
+ "byte_start": 21269,
587
+ "byte_end": 22323,
588
588
  "bytes": 1054,
589
589
  "h3_count": 4
590
590
  },
@@ -592,8 +592,8 @@
592
592
  "name": "Compliance Theater Check",
593
593
  "normalized_name": "compliance-theater-check",
594
594
  "line": 348,
595
- "byte_start": 21903,
596
- "byte_end": 23932,
595
+ "byte_start": 22323,
596
+ "byte_end": 24352,
597
597
  "bytes": 2029,
598
598
  "h3_count": 0
599
599
  }
@@ -601,138 +601,138 @@
601
601
  },
602
602
  "rag-pipeline-security": {
603
603
  "path": "skills/rag-pipeline-security/skill.md",
604
- "total_bytes": 30486,
605
- "total_lines": 328,
604
+ "total_bytes": 31195,
605
+ "total_lines": 330,
606
606
  "frontmatter": {
607
607
  "line_start": 1,
608
- "line_end": 41,
608
+ "line_end": 43,
609
609
  "byte_start": 0,
610
- "byte_end": 882
610
+ "byte_end": 1146
611
611
  },
612
612
  "sections": [
613
613
  {
614
614
  "name": "Threat Context (mid-2026)",
615
615
  "normalized_name": "threat-context",
616
- "line": 45,
617
- "byte_start": 919,
618
- "byte_end": 1866,
619
- "bytes": 947,
616
+ "line": 47,
617
+ "byte_start": 1183,
618
+ "byte_end": 2575,
619
+ "bytes": 1392,
620
620
  "h3_count": 0
621
621
  },
622
622
  {
623
623
  "name": "Attack Class 1: Embedding Manipulation for Data Exfiltration",
624
624
  "normalized_name": "attack-class-1-embedding-manipulation-for-data-exfiltration",
625
- "line": 65,
626
- "byte_start": 1866,
627
- "byte_end": 3507,
625
+ "line": 67,
626
+ "byte_start": 2575,
627
+ "byte_end": 4216,
628
628
  "bytes": 1641,
629
629
  "h3_count": 0
630
630
  },
631
631
  {
632
632
  "name": "Attack Class 2: Vector Store Poisoning",
633
633
  "normalized_name": "attack-class-2-vector-store-poisoning",
634
- "line": 86,
635
- "byte_start": 3507,
636
- "byte_end": 5520,
634
+ "line": 88,
635
+ "byte_start": 4216,
636
+ "byte_end": 6229,
637
637
  "bytes": 2013,
638
638
  "h3_count": 0
639
639
  },
640
640
  {
641
641
  "name": "Attack Class 3: Chunking Exploitation",
642
642
  "normalized_name": "attack-class-3-chunking-exploitation",
643
- "line": 110,
644
- "byte_start": 5520,
645
- "byte_end": 6743,
643
+ "line": 112,
644
+ "byte_start": 6229,
645
+ "byte_end": 7452,
646
646
  "bytes": 1223,
647
647
  "h3_count": 0
648
648
  },
649
649
  {
650
650
  "name": "Attack Class 4: Retrieval Filter Bypass",
651
651
  "normalized_name": "attack-class-4-retrieval-filter-bypass",
652
- "line": 127,
653
- "byte_start": 6743,
654
- "byte_end": 7946,
652
+ "line": 129,
653
+ "byte_start": 7452,
654
+ "byte_end": 8655,
655
655
  "bytes": 1203,
656
656
  "h3_count": 0
657
657
  },
658
658
  {
659
659
  "name": "Attack Class 5: Indirect Prompt Injection via Retrieved Documents",
660
660
  "normalized_name": "attack-class-5-indirect-prompt-injection-via-retrieved-documents",
661
- "line": 145,
662
- "byte_start": 7946,
663
- "byte_end": 9624,
661
+ "line": 147,
662
+ "byte_start": 8655,
663
+ "byte_end": 10333,
664
664
  "bytes": 1678,
665
665
  "h3_count": 0
666
666
  },
667
667
  {
668
668
  "name": "Framework Lag Declaration",
669
669
  "normalized_name": "framework-lag-declaration",
670
- "line": 166,
671
- "byte_start": 9624,
672
- "byte_end": 11781,
670
+ "line": 168,
671
+ "byte_start": 10333,
672
+ "byte_end": 12490,
673
673
  "bytes": 2157,
674
674
  "h3_count": 0
675
675
  },
676
676
  {
677
677
  "name": "TTP Mapping (MITRE ATLAS v5.1.0)",
678
678
  "normalized_name": "ttp-mapping",
679
- "line": 181,
680
- "byte_start": 11781,
681
- "byte_end": 15423,
679
+ "line": 183,
680
+ "byte_start": 12490,
681
+ "byte_end": 16132,
682
682
  "bytes": 3642,
683
683
  "h3_count": 0
684
684
  },
685
685
  {
686
686
  "name": "Exploit Availability Matrix",
687
687
  "normalized_name": "exploit-availability-matrix",
688
- "line": 195,
689
- "byte_start": 15423,
690
- "byte_end": 20761,
688
+ "line": 197,
689
+ "byte_start": 16132,
690
+ "byte_end": 21470,
691
691
  "bytes": 5338,
692
692
  "h3_count": 1
693
693
  },
694
694
  {
695
695
  "name": "Analysis Procedure",
696
696
  "normalized_name": "analysis-procedure",
697
- "line": 215,
698
- "byte_start": 20761,
699
- "byte_end": 22481,
697
+ "line": 217,
698
+ "byte_start": 21470,
699
+ "byte_end": 23190,
700
700
  "bytes": 1720,
701
701
  "h3_count": 4
702
702
  },
703
703
  {
704
704
  "name": "Output Format",
705
705
  "normalized_name": "output-format",
706
- "line": 257,
707
- "byte_start": 22481,
708
- "byte_end": 23324,
706
+ "line": 259,
707
+ "byte_start": 23190,
708
+ "byte_end": 24033,
709
709
  "bytes": 843,
710
710
  "h3_count": 5
711
711
  },
712
712
  {
713
713
  "name": "Hand-Off / Related Skills",
714
714
  "normalized_name": "hand-off",
715
- "line": 289,
716
- "byte_start": 23324,
717
- "byte_end": 25963,
715
+ "line": 291,
716
+ "byte_start": 24033,
717
+ "byte_end": 26672,
718
718
  "bytes": 2639,
719
719
  "h3_count": 0
720
720
  },
721
721
  {
722
722
  "name": "Defensive Countermeasure Mapping",
723
723
  "normalized_name": "defensive-countermeasure-mapping",
724
- "line": 303,
725
- "byte_start": 25963,
726
- "byte_end": 29842,
724
+ "line": 305,
725
+ "byte_start": 26672,
726
+ "byte_end": 30551,
727
727
  "bytes": 3879,
728
728
  "h3_count": 0
729
729
  },
730
730
  {
731
731
  "name": "Compliance Theater Check",
732
732
  "normalized_name": "compliance-theater-check",
733
- "line": 325,
734
- "byte_start": 29842,
735
- "byte_end": 30486,
733
+ "line": 327,
734
+ "byte_start": 30551,
735
+ "byte_end": 31195,
736
736
  "bytes": 644,
737
737
  "h3_count": 0
738
738
  }
@@ -740,8 +740,8 @@
740
740
  },
741
741
  "ai-c2-detection": {
742
742
  "path": "skills/ai-c2-detection/skill.md",
743
- "total_bytes": 35429,
744
- "total_lines": 475,
743
+ "total_bytes": 36020,
744
+ "total_lines": 477,
745
745
  "frontmatter": {
746
746
  "line_start": 1,
747
747
  "line_end": 52,
@@ -754,106 +754,106 @@
754
754
  "normalized_name": "threat-context",
755
755
  "line": 56,
756
756
  "byte_start": 961,
757
- "byte_end": 5752,
758
- "bytes": 4791,
757
+ "byte_end": 6343,
758
+ "bytes": 5382,
759
759
  "h3_count": 3
760
760
  },
761
761
  {
762
762
  "name": "Framework Lag Declaration",
763
763
  "normalized_name": "framework-lag-declaration",
764
- "line": 144,
765
- "byte_start": 5752,
766
- "byte_end": 7238,
764
+ "line": 146,
765
+ "byte_start": 6343,
766
+ "byte_end": 7829,
767
767
  "bytes": 1486,
768
768
  "h3_count": 0
769
769
  },
770
770
  {
771
771
  "name": "Detection Architecture",
772
772
  "normalized_name": "detection-architecture",
773
- "line": 157,
774
- "byte_start": 7238,
775
- "byte_end": 9857,
773
+ "line": 159,
774
+ "byte_start": 7829,
775
+ "byte_end": 10448,
776
776
  "bytes": 2619,
777
777
  "h3_count": 4
778
778
  },
779
779
  {
780
780
  "name": "Incident Response Playbook — AI C2",
781
781
  "normalized_name": "incident-response-playbook-ai-c2",
782
- "line": 216,
783
- "byte_start": 9857,
784
- "byte_end": 12218,
782
+ "line": 218,
783
+ "byte_start": 10448,
784
+ "byte_end": 12809,
785
785
  "bytes": 2361,
786
786
  "h3_count": 6
787
787
  },
788
788
  {
789
789
  "name": "Detection Rule Examples",
790
790
  "normalized_name": "detection-rules",
791
- "line": 269,
792
- "byte_start": 12218,
793
- "byte_end": 13418,
791
+ "line": 271,
792
+ "byte_start": 12809,
793
+ "byte_end": 14009,
794
794
  "bytes": 1200,
795
795
  "h3_count": 2
796
796
  },
797
797
  {
798
798
  "name": "TTP Mapping (MITRE ATLAS v5.1.0 + MITRE ATT&CK)",
799
799
  "normalized_name": "ttp-mapping",
800
- "line": 322,
801
- "byte_start": 13418,
802
- "byte_end": 16853,
800
+ "line": 324,
801
+ "byte_start": 14009,
802
+ "byte_end": 17444,
803
803
  "bytes": 3435,
804
804
  "h3_count": 0
805
805
  },
806
806
  {
807
807
  "name": "Exploit Availability Matrix",
808
808
  "normalized_name": "exploit-availability-matrix",
809
- "line": 335,
810
- "byte_start": 16853,
811
- "byte_end": 22212,
809
+ "line": 337,
810
+ "byte_start": 17444,
811
+ "byte_end": 22803,
812
812
  "bytes": 5359,
813
813
  "h3_count": 2
814
814
  },
815
815
  {
816
816
  "name": "Analysis Procedure",
817
817
  "normalized_name": "analysis-procedure",
818
- "line": 358,
819
- "byte_start": 22212,
820
- "byte_end": 26296,
818
+ "line": 360,
819
+ "byte_start": 22803,
820
+ "byte_end": 26887,
821
821
  "bytes": 4084,
822
822
  "h3_count": 7
823
823
  },
824
824
  {
825
825
  "name": "Defensive Countermeasure Mapping",
826
826
  "normalized_name": "defensive-countermeasure-mapping",
827
- "line": 403,
828
- "byte_start": 26296,
829
- "byte_end": 30238,
827
+ "line": 405,
828
+ "byte_start": 26887,
829
+ "byte_end": 30829,
830
830
  "bytes": 3942,
831
831
  "h3_count": 0
832
832
  },
833
833
  {
834
834
  "name": "Compliance Theater Check",
835
835
  "normalized_name": "compliance-theater-check",
836
- "line": 427,
837
- "byte_start": 30238,
838
- "byte_end": 31628,
836
+ "line": 429,
837
+ "byte_start": 30829,
838
+ "byte_end": 32219,
839
839
  "bytes": 1390,
840
840
  "h3_count": 0
841
841
  },
842
842
  {
843
843
  "name": "Output Format",
844
844
  "normalized_name": "output-format",
845
- "line": 433,
846
- "byte_start": 31628,
847
- "byte_end": 32486,
845
+ "line": 435,
846
+ "byte_start": 32219,
847
+ "byte_end": 33077,
848
848
  "bytes": 858,
849
849
  "h3_count": 5
850
850
  },
851
851
  {
852
852
  "name": "Hand-Off / Related Skills",
853
853
  "normalized_name": "hand-off",
854
- "line": 464,
855
- "byte_start": 32486,
856
- "byte_end": 35429,
854
+ "line": 466,
855
+ "byte_start": 33077,
856
+ "byte_end": 36020,
857
857
  "bytes": 2943,
858
858
  "h3_count": 0
859
859
  }
@@ -1170,7 +1170,7 @@
1170
1170
  },
1171
1171
  "zeroday-gap-learn": {
1172
1172
  "path": "skills/zeroday-gap-learn/skill.md",
1173
- "total_bytes": 37109,
1173
+ "total_bytes": 37609,
1174
1174
  "total_lines": 444,
1175
1175
  "frontmatter": {
1176
1176
  "line_start": 1,
@@ -1193,16 +1193,16 @@
1193
1193
  "normalized_name": "threat-context",
1194
1194
  "line": 43,
1195
1195
  "byte_start": 1807,
1196
- "byte_end": 3480,
1197
- "bytes": 1673,
1196
+ "byte_end": 3980,
1197
+ "bytes": 2173,
1198
1198
  "h3_count": 0
1199
1199
  },
1200
1200
  {
1201
1201
  "name": "Framework Lag Declaration",
1202
1202
  "normalized_name": "framework-lag-declaration",
1203
1203
  "line": 56,
1204
- "byte_start": 3480,
1205
- "byte_end": 6025,
1204
+ "byte_start": 3980,
1205
+ "byte_end": 6525,
1206
1206
  "bytes": 2545,
1207
1207
  "h3_count": 0
1208
1208
  },
@@ -1210,8 +1210,8 @@
1210
1210
  "name": "TTP Mapping",
1211
1211
  "normalized_name": "ttp-mapping",
1212
1212
  "line": 74,
1213
- "byte_start": 6025,
1214
- "byte_end": 7220,
1213
+ "byte_start": 6525,
1214
+ "byte_end": 7720,
1215
1215
  "bytes": 1195,
1216
1216
  "h3_count": 0
1217
1217
  },
@@ -1219,8 +1219,8 @@
1219
1219
  "name": "Exploit Availability Matrix",
1220
1220
  "normalized_name": "exploit-availability-matrix",
1221
1221
  "line": 89,
1222
- "byte_start": 7220,
1223
- "byte_end": 10022,
1222
+ "byte_start": 7720,
1223
+ "byte_end": 10522,
1224
1224
  "bytes": 2802,
1225
1225
  "h3_count": 0
1226
1226
  },
@@ -1228,8 +1228,8 @@
1228
1228
  "name": "The Learning Loop",
1229
1229
  "normalized_name": "the-learning-loop",
1230
1230
  "line": 108,
1231
- "byte_start": 10022,
1232
- "byte_end": 11439,
1231
+ "byte_start": 10522,
1232
+ "byte_end": 11939,
1233
1233
  "bytes": 1417,
1234
1234
  "h3_count": 0
1235
1235
  },
@@ -1237,8 +1237,8 @@
1237
1237
  "name": "Pre-Run Lessons (Encoded from Documented Zero-Days)",
1238
1238
  "normalized_name": "pre-run-lessons-encoded-from-documented-zero-days",
1239
1239
  "line": 146,
1240
- "byte_start": 11439,
1241
- "byte_end": 32290,
1240
+ "byte_start": 11939,
1241
+ "byte_end": 32790,
1242
1242
  "bytes": 20851,
1243
1243
  "h3_count": 8
1244
1244
  },
@@ -1246,8 +1246,8 @@
1246
1246
  "name": "Analysis Procedure for New Zero-Days",
1247
1247
  "normalized_name": "analysis-procedure",
1248
1248
  "line": 338,
1249
- "byte_start": 32290,
1250
- "byte_end": 34412,
1249
+ "byte_start": 32790,
1250
+ "byte_end": 34912,
1251
1251
  "bytes": 2122,
1252
1252
  "h3_count": 6
1253
1253
  },
@@ -1255,8 +1255,8 @@
1255
1255
  "name": "Output Format",
1256
1256
  "normalized_name": "output-format",
1257
1257
  "line": 398,
1258
- "byte_start": 34412,
1259
- "byte_end": 35271,
1258
+ "byte_start": 34912,
1259
+ "byte_end": 35771,
1260
1260
  "bytes": 859,
1261
1261
  "h3_count": 7
1262
1262
  },
@@ -1264,8 +1264,8 @@
1264
1264
  "name": "Compliance Theater Check",
1265
1265
  "normalized_name": "compliance-theater-check",
1266
1266
  "line": 435,
1267
- "byte_start": 35271,
1268
- "byte_end": 37109,
1267
+ "byte_start": 35771,
1268
+ "byte_end": 37609,
1269
1269
  "bytes": 1838,
1270
1270
  "h3_count": 0
1271
1271
  }
@@ -1784,84 +1784,84 @@
1784
1784
  },
1785
1785
  "attack-surface-pentest": {
1786
1786
  "path": "skills/attack-surface-pentest/skill.md",
1787
- "total_bytes": 32368,
1788
- "total_lines": 385,
1787
+ "total_bytes": 32626,
1788
+ "total_lines": 386,
1789
1789
  "frontmatter": {
1790
1790
  "line_start": 1,
1791
- "line_end": 63,
1791
+ "line_end": 64,
1792
1792
  "byte_start": 0,
1793
- "byte_end": 1386
1793
+ "byte_end": 1644
1794
1794
  },
1795
1795
  "sections": [
1796
1796
  {
1797
1797
  "name": "Threat Context (mid-2026)",
1798
1798
  "normalized_name": "threat-context",
1799
- "line": 67,
1800
- "byte_start": 1438,
1801
- "byte_end": 6142,
1799
+ "line": 68,
1800
+ "byte_start": 1696,
1801
+ "byte_end": 6400,
1802
1802
  "bytes": 4704,
1803
1803
  "h3_count": 8
1804
1804
  },
1805
1805
  {
1806
1806
  "name": "Framework Lag Declaration",
1807
1807
  "normalized_name": "framework-lag-declaration",
1808
- "line": 105,
1809
- "byte_start": 6142,
1810
- "byte_end": 10703,
1808
+ "line": 106,
1809
+ "byte_start": 6400,
1810
+ "byte_end": 10961,
1811
1811
  "bytes": 4561,
1812
1812
  "h3_count": 0
1813
1813
  },
1814
1814
  {
1815
1815
  "name": "TTP Mapping (MITRE ATLAS v5.1.0 + MITRE ATT&CK v17)",
1816
1816
  "normalized_name": "ttp-mapping",
1817
- "line": 123,
1818
- "byte_start": 10703,
1819
- "byte_end": 12934,
1817
+ "line": 124,
1818
+ "byte_start": 10961,
1819
+ "byte_end": 13192,
1820
1820
  "bytes": 2231,
1821
1821
  "h3_count": 0
1822
1822
  },
1823
1823
  {
1824
1824
  "name": "Exploit Availability Matrix",
1825
1825
  "normalized_name": "exploit-availability-matrix",
1826
- "line": 142,
1827
- "byte_start": 12934,
1828
- "byte_end": 15389,
1826
+ "line": 143,
1827
+ "byte_start": 13192,
1828
+ "byte_end": 15647,
1829
1829
  "bytes": 2455,
1830
1830
  "h3_count": 0
1831
1831
  },
1832
1832
  {
1833
1833
  "name": "Analysis Procedure",
1834
1834
  "normalized_name": "analysis-procedure",
1835
- "line": 159,
1836
- "byte_start": 15389,
1837
- "byte_end": 25092,
1835
+ "line": 160,
1836
+ "byte_start": 15647,
1837
+ "byte_end": 25350,
1838
1838
  "bytes": 9703,
1839
1839
  "h3_count": 4
1840
1840
  },
1841
1841
  {
1842
1842
  "name": "Output Format",
1843
1843
  "normalized_name": "output-format",
1844
- "line": 280,
1845
- "byte_start": 25092,
1846
- "byte_end": 28441,
1844
+ "line": 281,
1845
+ "byte_start": 25350,
1846
+ "byte_end": 28699,
1847
1847
  "bytes": 3349,
1848
1848
  "h3_count": 9
1849
1849
  },
1850
1850
  {
1851
1851
  "name": "Compliance Theater Check",
1852
1852
  "normalized_name": "compliance-theater-check",
1853
- "line": 360,
1854
- "byte_start": 28441,
1855
- "byte_end": 30757,
1853
+ "line": 361,
1854
+ "byte_start": 28699,
1855
+ "byte_end": 31015,
1856
1856
  "bytes": 2316,
1857
1857
  "h3_count": 0
1858
1858
  },
1859
1859
  {
1860
1860
  "name": "Defensive Countermeasure Mapping (D3FEND)",
1861
1861
  "normalized_name": "defensive-countermeasure-mapping",
1862
- "line": 374,
1863
- "byte_start": 30757,
1864
- "byte_end": 32368,
1862
+ "line": 375,
1863
+ "byte_start": 31015,
1864
+ "byte_end": 32626,
1865
1865
  "bytes": 1611,
1866
1866
  "h3_count": 0
1867
1867
  }
@@ -2039,84 +2039,84 @@
2039
2039
  },
2040
2040
  "supply-chain-integrity": {
2041
2041
  "path": "skills/supply-chain-integrity/skill.md",
2042
- "total_bytes": 39822,
2043
- "total_lines": 323,
2042
+ "total_bytes": 40261,
2043
+ "total_lines": 325,
2044
2044
  "frontmatter": {
2045
2045
  "line_start": 1,
2046
- "line_end": 68,
2046
+ "line_end": 70,
2047
2047
  "byte_start": 0,
2048
- "byte_end": 1862
2048
+ "byte_end": 2301
2049
2049
  },
2050
2050
  "sections": [
2051
2051
  {
2052
2052
  "name": "Threat Context (mid-2026)",
2053
2053
  "normalized_name": "threat-context",
2054
- "line": 72,
2055
- "byte_start": 1900,
2056
- "byte_end": 7366,
2054
+ "line": 74,
2055
+ "byte_start": 2339,
2056
+ "byte_end": 7805,
2057
2057
  "bytes": 5466,
2058
2058
  "h3_count": 0
2059
2059
  },
2060
2060
  {
2061
2061
  "name": "Framework Lag Declaration",
2062
2062
  "normalized_name": "framework-lag-declaration",
2063
- "line": 91,
2064
- "byte_start": 7366,
2065
- "byte_end": 17849,
2063
+ "line": 93,
2064
+ "byte_start": 7805,
2065
+ "byte_end": 18288,
2066
2066
  "bytes": 10483,
2067
2067
  "h3_count": 1
2068
2068
  },
2069
2069
  {
2070
2070
  "name": "TTP Mapping",
2071
2071
  "normalized_name": "ttp-mapping",
2072
- "line": 136,
2073
- "byte_start": 17849,
2074
- "byte_end": 20977,
2072
+ "line": 138,
2073
+ "byte_start": 18288,
2074
+ "byte_end": 21416,
2075
2075
  "bytes": 3128,
2076
2076
  "h3_count": 0
2077
2077
  },
2078
2078
  {
2079
2079
  "name": "Exploit Availability Matrix",
2080
2080
  "normalized_name": "exploit-availability-matrix",
2081
- "line": 159,
2082
- "byte_start": 20977,
2083
- "byte_end": 25558,
2081
+ "line": 161,
2082
+ "byte_start": 21416,
2083
+ "byte_end": 25997,
2084
2084
  "bytes": 4581,
2085
2085
  "h3_count": 0
2086
2086
  },
2087
2087
  {
2088
2088
  "name": "Analysis Procedure",
2089
2089
  "normalized_name": "analysis-procedure",
2090
- "line": 176,
2091
- "byte_start": 25558,
2092
- "byte_end": 33015,
2090
+ "line": 178,
2091
+ "byte_start": 25997,
2092
+ "byte_end": 33454,
2093
2093
  "bytes": 7457,
2094
2094
  "h3_count": 4
2095
2095
  },
2096
2096
  {
2097
2097
  "name": "Output Format",
2098
2098
  "normalized_name": "output-format",
2099
- "line": 250,
2100
- "byte_start": 33015,
2101
- "byte_end": 35117,
2099
+ "line": 252,
2100
+ "byte_start": 33454,
2101
+ "byte_end": 35556,
2102
2102
  "bytes": 2102,
2103
2103
  "h3_count": 9
2104
2104
  },
2105
2105
  {
2106
2106
  "name": "Compliance Theater Check",
2107
2107
  "normalized_name": "compliance-theater-check",
2108
- "line": 290,
2109
- "byte_start": 35117,
2110
- "byte_end": 37405,
2108
+ "line": 292,
2109
+ "byte_start": 35556,
2110
+ "byte_end": 37844,
2111
2111
  "bytes": 2288,
2112
2112
  "h3_count": 0
2113
2113
  },
2114
2114
  {
2115
2115
  "name": "Defensive Countermeasure Mapping",
2116
2116
  "normalized_name": "defensive-countermeasure-mapping",
2117
- "line": 306,
2118
- "byte_start": 37405,
2119
- "byte_end": 39822,
2117
+ "line": 308,
2118
+ "byte_start": 37844,
2119
+ "byte_end": 40261,
2120
2120
  "bytes": 2417,
2121
2121
  "h3_count": 0
2122
2122
  }
@@ -2594,93 +2594,93 @@
2594
2594
  },
2595
2595
  "webapp-security": {
2596
2596
  "path": "skills/webapp-security/skill.md",
2597
- "total_bytes": 28798,
2598
- "total_lines": 285,
2597
+ "total_bytes": 29073,
2598
+ "total_lines": 287,
2599
2599
  "frontmatter": {
2600
2600
  "line_start": 1,
2601
- "line_end": 72,
2601
+ "line_end": 74,
2602
2602
  "byte_start": 0,
2603
- "byte_end": 1347
2603
+ "byte_end": 1622
2604
2604
  },
2605
2605
  "sections": [
2606
2606
  {
2607
2607
  "name": "Threat Context (mid-2026)",
2608
2608
  "normalized_name": "threat-context",
2609
- "line": 76,
2610
- "byte_start": 1387,
2611
- "byte_end": 4837,
2609
+ "line": 78,
2610
+ "byte_start": 1662,
2611
+ "byte_end": 5112,
2612
2612
  "bytes": 3450,
2613
2613
  "h3_count": 0
2614
2614
  },
2615
2615
  {
2616
2616
  "name": "Framework Lag Declaration",
2617
2617
  "normalized_name": "framework-lag-declaration",
2618
- "line": 90,
2619
- "byte_start": 4837,
2620
- "byte_end": 8398,
2618
+ "line": 92,
2619
+ "byte_start": 5112,
2620
+ "byte_end": 8673,
2621
2621
  "bytes": 3561,
2622
2622
  "h3_count": 0
2623
2623
  },
2624
2624
  {
2625
2625
  "name": "TTP Mapping (MITRE ATT&CK Enterprise + ATLAS v5.1.0)",
2626
2626
  "normalized_name": "ttp-mapping",
2627
- "line": 110,
2628
- "byte_start": 8398,
2629
- "byte_end": 9916,
2627
+ "line": 112,
2628
+ "byte_start": 8673,
2629
+ "byte_end": 10191,
2630
2630
  "bytes": 1518,
2631
2631
  "h3_count": 0
2632
2632
  },
2633
2633
  {
2634
2634
  "name": "Exploit Availability Matrix",
2635
2635
  "normalized_name": "exploit-availability-matrix",
2636
- "line": 122,
2637
- "byte_start": 9916,
2638
- "byte_end": 13362,
2636
+ "line": 124,
2637
+ "byte_start": 10191,
2638
+ "byte_end": 13637,
2639
2639
  "bytes": 3446,
2640
2640
  "h3_count": 0
2641
2641
  },
2642
2642
  {
2643
2643
  "name": "Analysis Procedure",
2644
2644
  "normalized_name": "analysis-procedure",
2645
- "line": 140,
2646
- "byte_start": 13362,
2647
- "byte_end": 19965,
2645
+ "line": 142,
2646
+ "byte_start": 13637,
2647
+ "byte_end": 20240,
2648
2648
  "bytes": 6603,
2649
2649
  "h3_count": 1
2650
2650
  },
2651
2651
  {
2652
2652
  "name": "Output Format",
2653
2653
  "normalized_name": "output-format",
2654
- "line": 188,
2655
- "byte_start": 19965,
2656
- "byte_end": 23107,
2654
+ "line": 190,
2655
+ "byte_start": 20240,
2656
+ "byte_end": 23382,
2657
2657
  "bytes": 3142,
2658
2658
  "h3_count": 6
2659
2659
  },
2660
2660
  {
2661
2661
  "name": "Compliance Theater Check",
2662
2662
  "normalized_name": "compliance-theater-check",
2663
- "line": 247,
2664
- "byte_start": 23107,
2665
- "byte_end": 25084,
2663
+ "line": 249,
2664
+ "byte_start": 23382,
2665
+ "byte_end": 25359,
2666
2666
  "bytes": 1977,
2667
2667
  "h3_count": 0
2668
2668
  },
2669
2669
  {
2670
2670
  "name": "Defensive Countermeasure Mapping",
2671
2671
  "normalized_name": "defensive-countermeasure-mapping",
2672
- "line": 261,
2673
- "byte_start": 25084,
2674
- "byte_end": 27603,
2672
+ "line": 263,
2673
+ "byte_start": 25359,
2674
+ "byte_end": 27878,
2675
2675
  "bytes": 2519,
2676
2676
  "h3_count": 0
2677
2677
  },
2678
2678
  {
2679
2679
  "name": "Hand-Off / Related Skills",
2680
2680
  "normalized_name": "hand-off",
2681
- "line": 275,
2682
- "byte_start": 27603,
2683
- "byte_end": 28798,
2681
+ "line": 277,
2682
+ "byte_start": 27878,
2683
+ "byte_end": 29073,
2684
2684
  "bytes": 1195,
2685
2685
  "h3_count": 0
2686
2686
  }
@@ -2688,8 +2688,8 @@
2688
2688
  },
2689
2689
  "ai-risk-management": {
2690
2690
  "path": "skills/ai-risk-management/skill.md",
2691
- "total_bytes": 34005,
2692
- "total_lines": 316,
2691
+ "total_bytes": 34702,
2692
+ "total_lines": 318,
2693
2693
  "frontmatter": {
2694
2694
  "line_start": 1,
2695
2695
  "line_end": 46,
@@ -2711,79 +2711,79 @@
2711
2711
  "normalized_name": "threat-context",
2712
2712
  "line": 58,
2713
2713
  "byte_start": 1915,
2714
- "byte_end": 5581,
2715
- "bytes": 3666,
2714
+ "byte_end": 6278,
2715
+ "bytes": 4363,
2716
2716
  "h3_count": 0
2717
2717
  },
2718
2718
  {
2719
2719
  "name": "Framework Lag Declaration",
2720
2720
  "normalized_name": "framework-lag-declaration",
2721
- "line": 84,
2722
- "byte_start": 5581,
2723
- "byte_end": 10867,
2721
+ "line": 86,
2722
+ "byte_start": 6278,
2723
+ "byte_end": 11564,
2724
2724
  "bytes": 5286,
2725
2725
  "h3_count": 0
2726
2726
  },
2727
2727
  {
2728
2728
  "name": "TTP Mapping",
2729
2729
  "normalized_name": "ttp-mapping",
2730
- "line": 108,
2731
- "byte_start": 10867,
2732
- "byte_end": 13438,
2730
+ "line": 110,
2731
+ "byte_start": 11564,
2732
+ "byte_end": 14135,
2733
2733
  "bytes": 2571,
2734
2734
  "h3_count": 0
2735
2735
  },
2736
2736
  {
2737
2737
  "name": "Exploit Availability Matrix",
2738
2738
  "normalized_name": "exploit-availability-matrix",
2739
- "line": 130,
2740
- "byte_start": 13438,
2741
- "byte_end": 15904,
2739
+ "line": 132,
2740
+ "byte_start": 14135,
2741
+ "byte_end": 16601,
2742
2742
  "bytes": 2466,
2743
2743
  "h3_count": 0
2744
2744
  },
2745
2745
  {
2746
2746
  "name": "Analysis Procedure",
2747
2747
  "normalized_name": "analysis-procedure",
2748
- "line": 147,
2749
- "byte_start": 15904,
2750
- "byte_end": 24568,
2748
+ "line": 149,
2749
+ "byte_start": 16601,
2750
+ "byte_end": 25265,
2751
2751
  "bytes": 8664,
2752
2752
  "h3_count": 10
2753
2753
  },
2754
2754
  {
2755
2755
  "name": "Output Format",
2756
2756
  "normalized_name": "output-format",
2757
- "line": 217,
2758
- "byte_start": 24568,
2759
- "byte_end": 27428,
2757
+ "line": 219,
2758
+ "byte_start": 25265,
2759
+ "byte_end": 28125,
2760
2760
  "bytes": 2860,
2761
2761
  "h3_count": 10
2762
2762
  },
2763
2763
  {
2764
2764
  "name": "Compliance Theater Check",
2765
2765
  "normalized_name": "compliance-theater-check",
2766
- "line": 271,
2767
- "byte_start": 27428,
2768
- "byte_end": 30227,
2766
+ "line": 273,
2767
+ "byte_start": 28125,
2768
+ "byte_end": 30924,
2769
2769
  "bytes": 2799,
2770
2770
  "h3_count": 0
2771
2771
  },
2772
2772
  {
2773
2773
  "name": "Defensive Countermeasure Mapping",
2774
2774
  "normalized_name": "defensive-countermeasure-mapping",
2775
- "line": 289,
2776
- "byte_start": 30227,
2777
- "byte_end": 32014,
2775
+ "line": 291,
2776
+ "byte_start": 30924,
2777
+ "byte_end": 32711,
2778
2778
  "bytes": 1787,
2779
2779
  "h3_count": 0
2780
2780
  },
2781
2781
  {
2782
2782
  "name": "Hand-Off / Related Skills",
2783
2783
  "normalized_name": "hand-off",
2784
- "line": 303,
2785
- "byte_start": 32014,
2786
- "byte_end": 34005,
2784
+ "line": 305,
2785
+ "byte_start": 32711,
2786
+ "byte_end": 34702,
2787
2787
  "bytes": 1991,
2788
2788
  "h3_count": 0
2789
2789
  }
@@ -3165,95 +3165,189 @@
3165
3165
  }
3166
3166
  ]
3167
3167
  },
3168
+ "sector-telecom": {
3169
+ "path": "skills/sector-telecom/skill.md",
3170
+ "total_bytes": 20782,
3171
+ "total_lines": 260,
3172
+ "frontmatter": {
3173
+ "line_start": 1,
3174
+ "line_end": 74,
3175
+ "byte_start": 0,
3176
+ "byte_end": 1909
3177
+ },
3178
+ "sections": [
3179
+ {
3180
+ "name": "Threat Context (mid-2026)",
3181
+ "normalized_name": "threat-context",
3182
+ "line": 76,
3183
+ "byte_start": 1910,
3184
+ "byte_end": 5098,
3185
+ "bytes": 3188,
3186
+ "h3_count": 0
3187
+ },
3188
+ {
3189
+ "name": "Framework Lag Declaration",
3190
+ "normalized_name": "framework-lag-declaration",
3191
+ "line": 90,
3192
+ "byte_start": 5098,
3193
+ "byte_end": 7180,
3194
+ "bytes": 2082,
3195
+ "h3_count": 0
3196
+ },
3197
+ {
3198
+ "name": "TTP Mapping",
3199
+ "normalized_name": "ttp-mapping",
3200
+ "line": 94,
3201
+ "byte_start": 7180,
3202
+ "byte_end": 8614,
3203
+ "bytes": 1434,
3204
+ "h3_count": 0
3205
+ },
3206
+ {
3207
+ "name": "Exploit Availability Matrix",
3208
+ "normalized_name": "exploit-availability-matrix",
3209
+ "line": 108,
3210
+ "byte_start": 8614,
3211
+ "byte_end": 9808,
3212
+ "bytes": 1194,
3213
+ "h3_count": 0
3214
+ },
3215
+ {
3216
+ "name": "Analysis Procedure",
3217
+ "normalized_name": "analysis-procedure",
3218
+ "line": 121,
3219
+ "byte_start": 9808,
3220
+ "byte_end": 15637,
3221
+ "bytes": 5829,
3222
+ "h3_count": 7
3223
+ },
3224
+ {
3225
+ "name": "Output Format",
3226
+ "normalized_name": "output-format",
3227
+ "line": 183,
3228
+ "byte_start": 15637,
3229
+ "byte_end": 17152,
3230
+ "bytes": 1515,
3231
+ "h3_count": 0
3232
+ },
3233
+ {
3234
+ "name": "Compliance Theater Check",
3235
+ "normalized_name": "compliance-theater-check",
3236
+ "line": 231,
3237
+ "byte_start": 17152,
3238
+ "byte_end": 19359,
3239
+ "bytes": 2207,
3240
+ "h3_count": 0
3241
+ },
3242
+ {
3243
+ "name": "Defensive Countermeasure Mapping",
3244
+ "normalized_name": "defensive-countermeasure-mapping",
3245
+ "line": 243,
3246
+ "byte_start": 19359,
3247
+ "byte_end": 20110,
3248
+ "bytes": 751,
3249
+ "h3_count": 0
3250
+ },
3251
+ {
3252
+ "name": "Hand-Off / Related Skills",
3253
+ "normalized_name": "hand-off",
3254
+ "line": 253,
3255
+ "byte_start": 20110,
3256
+ "byte_end": 20782,
3257
+ "bytes": 672,
3258
+ "h3_count": 0
3259
+ }
3260
+ ]
3261
+ },
3168
3262
  "api-security": {
3169
3263
  "path": "skills/api-security/skill.md",
3170
- "total_bytes": 34862,
3171
- "total_lines": 291,
3264
+ "total_bytes": 35524,
3265
+ "total_lines": 295,
3172
3266
  "frontmatter": {
3173
3267
  "line_start": 1,
3174
- "line_end": 67,
3268
+ "line_end": 71,
3175
3269
  "byte_start": 0,
3176
- "byte_end": 1291
3270
+ "byte_end": 1953
3177
3271
  },
3178
3272
  "sections": [
3179
3273
  {
3180
3274
  "name": "Threat Context (mid-2026)",
3181
3275
  "normalized_name": "threat-context",
3182
- "line": 71,
3183
- "byte_start": 1319,
3184
- "byte_end": 6499,
3276
+ "line": 75,
3277
+ "byte_start": 1981,
3278
+ "byte_end": 7161,
3185
3279
  "bytes": 5180,
3186
3280
  "h3_count": 0
3187
3281
  },
3188
3282
  {
3189
3283
  "name": "Framework Lag Declaration",
3190
3284
  "normalized_name": "framework-lag-declaration",
3191
- "line": 97,
3192
- "byte_start": 6499,
3193
- "byte_end": 9777,
3285
+ "line": 101,
3286
+ "byte_start": 7161,
3287
+ "byte_end": 10439,
3194
3288
  "bytes": 3278,
3195
3289
  "h3_count": 0
3196
3290
  },
3197
3291
  {
3198
3292
  "name": "TTP Mapping (MITRE ATT&CK Enterprise + ATLAS v5.1.0)",
3199
3293
  "normalized_name": "ttp-mapping",
3200
- "line": 120,
3201
- "byte_start": 9777,
3202
- "byte_end": 12076,
3294
+ "line": 124,
3295
+ "byte_start": 10439,
3296
+ "byte_end": 12738,
3203
3297
  "bytes": 2299,
3204
3298
  "h3_count": 0
3205
3299
  },
3206
3300
  {
3207
3301
  "name": "Exploit Availability Matrix",
3208
3302
  "normalized_name": "exploit-availability-matrix",
3209
- "line": 134,
3210
- "byte_start": 12076,
3211
- "byte_end": 16544,
3303
+ "line": 138,
3304
+ "byte_start": 12738,
3305
+ "byte_end": 17206,
3212
3306
  "bytes": 4468,
3213
3307
  "h3_count": 0
3214
3308
  },
3215
3309
  {
3216
3310
  "name": "Analysis Procedure",
3217
3311
  "normalized_name": "analysis-procedure",
3218
- "line": 154,
3219
- "byte_start": 16544,
3220
- "byte_end": 24343,
3312
+ "line": 158,
3313
+ "byte_start": 17206,
3314
+ "byte_end": 25005,
3221
3315
  "bytes": 7799,
3222
3316
  "h3_count": 1
3223
3317
  },
3224
3318
  {
3225
3319
  "name": "Output Format",
3226
3320
  "normalized_name": "output-format",
3227
- "line": 202,
3228
- "byte_start": 24343,
3229
- "byte_end": 28061,
3321
+ "line": 206,
3322
+ "byte_start": 25005,
3323
+ "byte_end": 28723,
3230
3324
  "bytes": 3718,
3231
3325
  "h3_count": 9
3232
3326
  },
3233
3327
  {
3234
3328
  "name": "Compliance Theater Check",
3235
3329
  "normalized_name": "compliance-theater-check",
3236
- "line": 255,
3237
- "byte_start": 28061,
3238
- "byte_end": 30419,
3330
+ "line": 259,
3331
+ "byte_start": 28723,
3332
+ "byte_end": 31081,
3239
3333
  "bytes": 2358,
3240
3334
  "h3_count": 0
3241
3335
  },
3242
3336
  {
3243
3337
  "name": "Defensive Countermeasure Mapping",
3244
3338
  "normalized_name": "defensive-countermeasure-mapping",
3245
- "line": 269,
3246
- "byte_start": 30419,
3247
- "byte_end": 33657,
3339
+ "line": 273,
3340
+ "byte_start": 31081,
3341
+ "byte_end": 34319,
3248
3342
  "bytes": 3238,
3249
3343
  "h3_count": 0
3250
3344
  },
3251
3345
  {
3252
3346
  "name": "Hand-Off / Related Skills",
3253
3347
  "normalized_name": "hand-off",
3254
- "line": 283,
3255
- "byte_start": 33657,
3256
- "byte_end": 34862,
3348
+ "line": 287,
3349
+ "byte_start": 34319,
3350
+ "byte_end": 35524,
3257
3351
  "bytes": 1205,
3258
3352
  "h3_count": 0
3259
3353
  }
@@ -3355,93 +3449,93 @@
3355
3449
  },
3356
3450
  "container-runtime-security": {
3357
3451
  "path": "skills/container-runtime-security/skill.md",
3358
- "total_bytes": 48840,
3359
- "total_lines": 383,
3452
+ "total_bytes": 49104,
3453
+ "total_lines": 385,
3360
3454
  "frontmatter": {
3361
3455
  "line_start": 1,
3362
- "line_end": 61,
3456
+ "line_end": 63,
3363
3457
  "byte_start": 0,
3364
- "byte_end": 1232
3458
+ "byte_end": 1496
3365
3459
  },
3366
3460
  "sections": [
3367
3461
  {
3368
3462
  "name": "Threat Context (mid-2026)",
3369
3463
  "normalized_name": "threat-context",
3370
- "line": 65,
3371
- "byte_start": 1287,
3372
- "byte_end": 6810,
3464
+ "line": 67,
3465
+ "byte_start": 1551,
3466
+ "byte_end": 7074,
3373
3467
  "bytes": 5523,
3374
3468
  "h3_count": 0
3375
3469
  },
3376
3470
  {
3377
3471
  "name": "Framework Lag Declaration",
3378
3472
  "normalized_name": "framework-lag-declaration",
3379
- "line": 92,
3380
- "byte_start": 6810,
3381
- "byte_end": 13222,
3473
+ "line": 94,
3474
+ "byte_start": 7074,
3475
+ "byte_end": 13486,
3382
3476
  "bytes": 6412,
3383
3477
  "h3_count": 0
3384
3478
  },
3385
3479
  {
3386
3480
  "name": "TTP Mapping",
3387
3481
  "normalized_name": "ttp-mapping",
3388
- "line": 119,
3389
- "byte_start": 13222,
3390
- "byte_end": 17697,
3482
+ "line": 121,
3483
+ "byte_start": 13486,
3484
+ "byte_end": 17961,
3391
3485
  "bytes": 4475,
3392
3486
  "h3_count": 0
3393
3487
  },
3394
3488
  {
3395
3489
  "name": "Exploit Availability Matrix",
3396
3490
  "normalized_name": "exploit-availability-matrix",
3397
- "line": 143,
3398
- "byte_start": 17697,
3399
- "byte_end": 21700,
3491
+ "line": 145,
3492
+ "byte_start": 17961,
3493
+ "byte_end": 21964,
3400
3494
  "bytes": 4003,
3401
3495
  "h3_count": 0
3402
3496
  },
3403
3497
  {
3404
3498
  "name": "Analysis Procedure",
3405
3499
  "normalized_name": "analysis-procedure",
3406
- "line": 160,
3407
- "byte_start": 21700,
3408
- "byte_end": 32558,
3500
+ "line": 162,
3501
+ "byte_start": 21964,
3502
+ "byte_end": 32822,
3409
3503
  "bytes": 10858,
3410
3504
  "h3_count": 5
3411
3505
  },
3412
3506
  {
3413
3507
  "name": "Output Format",
3414
3508
  "normalized_name": "output-format",
3415
- "line": 246,
3416
- "byte_start": 32558,
3417
- "byte_end": 35477,
3509
+ "line": 248,
3510
+ "byte_start": 32822,
3511
+ "byte_end": 35741,
3418
3512
  "bytes": 2919,
3419
3513
  "h3_count": 12
3420
3514
  },
3421
3515
  {
3422
3516
  "name": "Compliance Theater Check",
3423
3517
  "normalized_name": "compliance-theater-check",
3424
- "line": 312,
3425
- "byte_start": 35477,
3426
- "byte_end": 38974,
3518
+ "line": 314,
3519
+ "byte_start": 35741,
3520
+ "byte_end": 39238,
3427
3521
  "bytes": 3497,
3428
3522
  "h3_count": 0
3429
3523
  },
3430
3524
  {
3431
3525
  "name": "Defensive Countermeasure Mapping",
3432
3526
  "normalized_name": "defensive-countermeasure-mapping",
3433
- "line": 348,
3434
- "byte_start": 38974,
3435
- "byte_end": 44246,
3527
+ "line": 350,
3528
+ "byte_start": 39238,
3529
+ "byte_end": 44510,
3436
3530
  "bytes": 5272,
3437
3531
  "h3_count": 0
3438
3532
  },
3439
3533
  {
3440
3534
  "name": "Hand-Off / Related Skills",
3441
3535
  "normalized_name": "hand-off",
3442
- "line": 365,
3443
- "byte_start": 44246,
3444
- "byte_end": 48840,
3536
+ "line": 367,
3537
+ "byte_start": 44510,
3538
+ "byte_end": 49104,
3445
3539
  "bytes": 4594,
3446
3540
  "h3_count": 0
3447
3541
  }