@blamejs/exceptd-skills 0.12.28 → 0.12.30
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/AGENTS.md +1 -1
- package/CHANGELOG.md +53 -0
- package/bin/exceptd.js +30 -20
- package/data/_indexes/_meta.json +9 -9
- package/data/_indexes/activity-feed.json +7 -7
- package/data/_indexes/chains.json +9 -9
- package/data/_indexes/currency.json +43 -43
- package/data/_indexes/stale-content.json +1 -1
- package/data/atlas-ttps.json +61 -111
- package/data/cve-catalog.json +136 -65
- package/data/cwe-catalog.json +151 -95
- package/data/d3fend-catalog.json +201 -54
- package/data/dlp-controls.json +2 -1
- package/data/framework-control-gaps.json +1214 -110
- package/data/playbooks/crypto-codebase.json +1 -1
- package/data/rfc-references.json +23 -67
- package/lib/exit-codes.js +2 -0
- package/lib/playbook-runner.js +25 -1
- package/manifest-snapshot.json +2 -2
- package/manifest-snapshot.sha256 +1 -1
- package/manifest.json +49 -48
- package/package.json +3 -2
- package/sbom.cdx.json +1853 -10
- package/scripts/backfill-theater-test.js +806 -0
- package/scripts/check-test-coverage.js +18 -4
- package/scripts/refresh-reverse-refs.js +171 -0
- package/scripts/refresh-sbom.js +155 -8
|
@@ -1,7 +1,7 @@
|
|
|
1
1
|
{
|
|
2
2
|
"_meta": {
|
|
3
3
|
"schema_version": "1.0.0",
|
|
4
|
-
"reference_date": "2026-05-
|
|
4
|
+
"reference_date": "2026-05-15",
|
|
5
5
|
"note": "Pre-computed skill currency snapshot. Reference date is manifest.threat_review_date (deterministic). Re-runs of build-indexes against the same inputs produce byte-identical output. The orchestrator `currency` command produces a real-time view against today's date.",
|
|
6
6
|
"decay_formula": "100 base; -30/-20/-10/-5 at 180/90/60/30-day thresholds. forward_watch count does NOT affect the score (it's a maintenance signal, not a staleness one). Label thresholds: ≥90 current, ≥70 acceptable, ≥50 stale, <50 critical_stale."
|
|
7
7
|
},
|
|
@@ -16,7 +16,7 @@
|
|
|
16
16
|
{
|
|
17
17
|
"skill": "age-gates-child-safety",
|
|
18
18
|
"last_threat_review": "2026-05-11",
|
|
19
|
-
"days_since_review":
|
|
19
|
+
"days_since_review": 4,
|
|
20
20
|
"currency_score": 100,
|
|
21
21
|
"currency_label": "current",
|
|
22
22
|
"forward_watch_count": 10,
|
|
@@ -25,7 +25,7 @@
|
|
|
25
25
|
{
|
|
26
26
|
"skill": "ai-attack-surface",
|
|
27
27
|
"last_threat_review": "2026-05-01",
|
|
28
|
-
"days_since_review":
|
|
28
|
+
"days_since_review": 14,
|
|
29
29
|
"currency_score": 100,
|
|
30
30
|
"currency_label": "current",
|
|
31
31
|
"forward_watch_count": 8,
|
|
@@ -34,7 +34,7 @@
|
|
|
34
34
|
{
|
|
35
35
|
"skill": "ai-c2-detection",
|
|
36
36
|
"last_threat_review": "2026-05-01",
|
|
37
|
-
"days_since_review":
|
|
37
|
+
"days_since_review": 14,
|
|
38
38
|
"currency_score": 100,
|
|
39
39
|
"currency_label": "current",
|
|
40
40
|
"forward_watch_count": 0,
|
|
@@ -43,7 +43,7 @@
|
|
|
43
43
|
{
|
|
44
44
|
"skill": "ai-risk-management",
|
|
45
45
|
"last_threat_review": "2026-05-11",
|
|
46
|
-
"days_since_review":
|
|
46
|
+
"days_since_review": 4,
|
|
47
47
|
"currency_score": 100,
|
|
48
48
|
"currency_label": "current",
|
|
49
49
|
"forward_watch_count": 0,
|
|
@@ -52,7 +52,7 @@
|
|
|
52
52
|
{
|
|
53
53
|
"skill": "api-security",
|
|
54
54
|
"last_threat_review": "2026-05-11",
|
|
55
|
-
"days_since_review":
|
|
55
|
+
"days_since_review": 4,
|
|
56
56
|
"currency_score": 100,
|
|
57
57
|
"currency_label": "current",
|
|
58
58
|
"forward_watch_count": 3,
|
|
@@ -61,7 +61,7 @@
|
|
|
61
61
|
{
|
|
62
62
|
"skill": "attack-surface-pentest",
|
|
63
63
|
"last_threat_review": "2026-05-11",
|
|
64
|
-
"days_since_review":
|
|
64
|
+
"days_since_review": 4,
|
|
65
65
|
"currency_score": 100,
|
|
66
66
|
"currency_label": "current",
|
|
67
67
|
"forward_watch_count": 5,
|
|
@@ -70,7 +70,7 @@
|
|
|
70
70
|
{
|
|
71
71
|
"skill": "cloud-iam-incident",
|
|
72
72
|
"last_threat_review": "2026-05-15",
|
|
73
|
-
"days_since_review":
|
|
73
|
+
"days_since_review": 0,
|
|
74
74
|
"currency_score": 100,
|
|
75
75
|
"currency_label": "current",
|
|
76
76
|
"forward_watch_count": 11,
|
|
@@ -79,7 +79,7 @@
|
|
|
79
79
|
{
|
|
80
80
|
"skill": "cloud-security",
|
|
81
81
|
"last_threat_review": "2026-05-11",
|
|
82
|
-
"days_since_review":
|
|
82
|
+
"days_since_review": 4,
|
|
83
83
|
"currency_score": 100,
|
|
84
84
|
"currency_label": "current",
|
|
85
85
|
"forward_watch_count": 14,
|
|
@@ -88,7 +88,7 @@
|
|
|
88
88
|
{
|
|
89
89
|
"skill": "compliance-theater",
|
|
90
90
|
"last_threat_review": "2026-05-01",
|
|
91
|
-
"days_since_review":
|
|
91
|
+
"days_since_review": 14,
|
|
92
92
|
"currency_score": 100,
|
|
93
93
|
"currency_label": "current",
|
|
94
94
|
"forward_watch_count": 0,
|
|
@@ -97,7 +97,7 @@
|
|
|
97
97
|
{
|
|
98
98
|
"skill": "container-runtime-security",
|
|
99
99
|
"last_threat_review": "2026-05-11",
|
|
100
|
-
"days_since_review":
|
|
100
|
+
"days_since_review": 4,
|
|
101
101
|
"currency_score": 100,
|
|
102
102
|
"currency_label": "current",
|
|
103
103
|
"forward_watch_count": 1,
|
|
@@ -106,7 +106,7 @@
|
|
|
106
106
|
{
|
|
107
107
|
"skill": "coordinated-vuln-disclosure",
|
|
108
108
|
"last_threat_review": "2026-05-11",
|
|
109
|
-
"days_since_review":
|
|
109
|
+
"days_since_review": 4,
|
|
110
110
|
"currency_score": 100,
|
|
111
111
|
"currency_label": "current",
|
|
112
112
|
"forward_watch_count": 6,
|
|
@@ -115,7 +115,7 @@
|
|
|
115
115
|
{
|
|
116
116
|
"skill": "defensive-countermeasure-mapping",
|
|
117
117
|
"last_threat_review": "2026-05-11",
|
|
118
|
-
"days_since_review":
|
|
118
|
+
"days_since_review": 4,
|
|
119
119
|
"currency_score": 100,
|
|
120
120
|
"currency_label": "current",
|
|
121
121
|
"forward_watch_count": 0,
|
|
@@ -124,7 +124,7 @@
|
|
|
124
124
|
{
|
|
125
125
|
"skill": "dlp-gap-analysis",
|
|
126
126
|
"last_threat_review": "2026-05-11",
|
|
127
|
-
"days_since_review":
|
|
127
|
+
"days_since_review": 4,
|
|
128
128
|
"currency_score": 100,
|
|
129
129
|
"currency_label": "current",
|
|
130
130
|
"forward_watch_count": 5,
|
|
@@ -133,7 +133,7 @@
|
|
|
133
133
|
{
|
|
134
134
|
"skill": "email-security-anti-phishing",
|
|
135
135
|
"last_threat_review": "2026-05-11",
|
|
136
|
-
"days_since_review":
|
|
136
|
+
"days_since_review": 4,
|
|
137
137
|
"currency_score": 100,
|
|
138
138
|
"currency_label": "current",
|
|
139
139
|
"forward_watch_count": 0,
|
|
@@ -142,7 +142,7 @@
|
|
|
142
142
|
{
|
|
143
143
|
"skill": "exploit-scoring",
|
|
144
144
|
"last_threat_review": "2026-05-01",
|
|
145
|
-
"days_since_review":
|
|
145
|
+
"days_since_review": 14,
|
|
146
146
|
"currency_score": 100,
|
|
147
147
|
"currency_label": "current",
|
|
148
148
|
"forward_watch_count": 0,
|
|
@@ -151,7 +151,7 @@
|
|
|
151
151
|
{
|
|
152
152
|
"skill": "framework-gap-analysis",
|
|
153
153
|
"last_threat_review": "2026-05-01",
|
|
154
|
-
"days_since_review":
|
|
154
|
+
"days_since_review": 14,
|
|
155
155
|
"currency_score": 100,
|
|
156
156
|
"currency_label": "current",
|
|
157
157
|
"forward_watch_count": 0,
|
|
@@ -160,7 +160,7 @@
|
|
|
160
160
|
{
|
|
161
161
|
"skill": "fuzz-testing-strategy",
|
|
162
162
|
"last_threat_review": "2026-05-11",
|
|
163
|
-
"days_since_review":
|
|
163
|
+
"days_since_review": 4,
|
|
164
164
|
"currency_score": 100,
|
|
165
165
|
"currency_label": "current",
|
|
166
166
|
"forward_watch_count": 4,
|
|
@@ -169,7 +169,7 @@
|
|
|
169
169
|
{
|
|
170
170
|
"skill": "global-grc",
|
|
171
171
|
"last_threat_review": "2026-05-01",
|
|
172
|
-
"days_since_review":
|
|
172
|
+
"days_since_review": 14,
|
|
173
173
|
"currency_score": 100,
|
|
174
174
|
"currency_label": "current",
|
|
175
175
|
"forward_watch_count": 0,
|
|
@@ -178,7 +178,7 @@
|
|
|
178
178
|
{
|
|
179
179
|
"skill": "identity-assurance",
|
|
180
180
|
"last_threat_review": "2026-05-11",
|
|
181
|
-
"days_since_review":
|
|
181
|
+
"days_since_review": 4,
|
|
182
182
|
"currency_score": 100,
|
|
183
183
|
"currency_label": "current",
|
|
184
184
|
"forward_watch_count": 0,
|
|
@@ -187,7 +187,7 @@
|
|
|
187
187
|
{
|
|
188
188
|
"skill": "idp-incident-response",
|
|
189
189
|
"last_threat_review": "2026-05-15",
|
|
190
|
-
"days_since_review":
|
|
190
|
+
"days_since_review": 0,
|
|
191
191
|
"currency_score": 100,
|
|
192
192
|
"currency_label": "current",
|
|
193
193
|
"forward_watch_count": 11,
|
|
@@ -196,7 +196,7 @@
|
|
|
196
196
|
{
|
|
197
197
|
"skill": "incident-response-playbook",
|
|
198
198
|
"last_threat_review": "2026-05-11",
|
|
199
|
-
"days_since_review":
|
|
199
|
+
"days_since_review": 4,
|
|
200
200
|
"currency_score": 100,
|
|
201
201
|
"currency_label": "current",
|
|
202
202
|
"forward_watch_count": 8,
|
|
@@ -205,7 +205,7 @@
|
|
|
205
205
|
{
|
|
206
206
|
"skill": "kernel-lpe-triage",
|
|
207
207
|
"last_threat_review": "2026-05-01",
|
|
208
|
-
"days_since_review":
|
|
208
|
+
"days_since_review": 14,
|
|
209
209
|
"currency_score": 100,
|
|
210
210
|
"currency_label": "current",
|
|
211
211
|
"forward_watch_count": 4,
|
|
@@ -214,7 +214,7 @@
|
|
|
214
214
|
{
|
|
215
215
|
"skill": "mcp-agent-trust",
|
|
216
216
|
"last_threat_review": "2026-05-01",
|
|
217
|
-
"days_since_review":
|
|
217
|
+
"days_since_review": 14,
|
|
218
218
|
"currency_score": 100,
|
|
219
219
|
"currency_label": "current",
|
|
220
220
|
"forward_watch_count": 4,
|
|
@@ -223,7 +223,7 @@
|
|
|
223
223
|
{
|
|
224
224
|
"skill": "mlops-security",
|
|
225
225
|
"last_threat_review": "2026-05-11",
|
|
226
|
-
"days_since_review":
|
|
226
|
+
"days_since_review": 4,
|
|
227
227
|
"currency_score": 100,
|
|
228
228
|
"currency_label": "current",
|
|
229
229
|
"forward_watch_count": 6,
|
|
@@ -232,7 +232,7 @@
|
|
|
232
232
|
{
|
|
233
233
|
"skill": "ot-ics-security",
|
|
234
234
|
"last_threat_review": "2026-05-11",
|
|
235
|
-
"days_since_review":
|
|
235
|
+
"days_since_review": 4,
|
|
236
236
|
"currency_score": 100,
|
|
237
237
|
"currency_label": "current",
|
|
238
238
|
"forward_watch_count": 0,
|
|
@@ -241,7 +241,7 @@
|
|
|
241
241
|
{
|
|
242
242
|
"skill": "policy-exception-gen",
|
|
243
243
|
"last_threat_review": "2026-05-01",
|
|
244
|
-
"days_since_review":
|
|
244
|
+
"days_since_review": 14,
|
|
245
245
|
"currency_score": 100,
|
|
246
246
|
"currency_label": "current",
|
|
247
247
|
"forward_watch_count": 4,
|
|
@@ -250,7 +250,7 @@
|
|
|
250
250
|
{
|
|
251
251
|
"skill": "pqc-first",
|
|
252
252
|
"last_threat_review": "2026-05-01",
|
|
253
|
-
"days_since_review":
|
|
253
|
+
"days_since_review": 14,
|
|
254
254
|
"currency_score": 100,
|
|
255
255
|
"currency_label": "current",
|
|
256
256
|
"forward_watch_count": 11,
|
|
@@ -259,7 +259,7 @@
|
|
|
259
259
|
{
|
|
260
260
|
"skill": "rag-pipeline-security",
|
|
261
261
|
"last_threat_review": "2026-05-01",
|
|
262
|
-
"days_since_review":
|
|
262
|
+
"days_since_review": 14,
|
|
263
263
|
"currency_score": 100,
|
|
264
264
|
"currency_label": "current",
|
|
265
265
|
"forward_watch_count": 1,
|
|
@@ -268,7 +268,7 @@
|
|
|
268
268
|
{
|
|
269
269
|
"skill": "ransomware-response",
|
|
270
270
|
"last_threat_review": "2026-05-15",
|
|
271
|
-
"days_since_review":
|
|
271
|
+
"days_since_review": 0,
|
|
272
272
|
"currency_score": 100,
|
|
273
273
|
"currency_label": "current",
|
|
274
274
|
"forward_watch_count": 10,
|
|
@@ -277,7 +277,7 @@
|
|
|
277
277
|
{
|
|
278
278
|
"skill": "researcher",
|
|
279
279
|
"last_threat_review": "2026-05-11",
|
|
280
|
-
"days_since_review":
|
|
280
|
+
"days_since_review": 4,
|
|
281
281
|
"currency_score": 100,
|
|
282
282
|
"currency_label": "current",
|
|
283
283
|
"forward_watch_count": 0,
|
|
@@ -286,7 +286,7 @@
|
|
|
286
286
|
{
|
|
287
287
|
"skill": "sector-energy",
|
|
288
288
|
"last_threat_review": "2026-05-11",
|
|
289
|
-
"days_since_review":
|
|
289
|
+
"days_since_review": 4,
|
|
290
290
|
"currency_score": 100,
|
|
291
291
|
"currency_label": "current",
|
|
292
292
|
"forward_watch_count": 8,
|
|
@@ -295,7 +295,7 @@
|
|
|
295
295
|
{
|
|
296
296
|
"skill": "sector-federal-government",
|
|
297
297
|
"last_threat_review": "2026-05-11",
|
|
298
|
-
"days_since_review":
|
|
298
|
+
"days_since_review": 4,
|
|
299
299
|
"currency_score": 100,
|
|
300
300
|
"currency_label": "current",
|
|
301
301
|
"forward_watch_count": 10,
|
|
@@ -304,7 +304,7 @@
|
|
|
304
304
|
{
|
|
305
305
|
"skill": "sector-financial",
|
|
306
306
|
"last_threat_review": "2026-05-11",
|
|
307
|
-
"days_since_review":
|
|
307
|
+
"days_since_review": 4,
|
|
308
308
|
"currency_score": 100,
|
|
309
309
|
"currency_label": "current",
|
|
310
310
|
"forward_watch_count": 12,
|
|
@@ -313,7 +313,7 @@
|
|
|
313
313
|
{
|
|
314
314
|
"skill": "sector-healthcare",
|
|
315
315
|
"last_threat_review": "2026-05-11",
|
|
316
|
-
"days_since_review":
|
|
316
|
+
"days_since_review": 4,
|
|
317
317
|
"currency_score": 100,
|
|
318
318
|
"currency_label": "current",
|
|
319
319
|
"forward_watch_count": 0,
|
|
@@ -322,7 +322,7 @@
|
|
|
322
322
|
{
|
|
323
323
|
"skill": "sector-telecom",
|
|
324
324
|
"last_threat_review": "2026-05-15",
|
|
325
|
-
"days_since_review":
|
|
325
|
+
"days_since_review": 0,
|
|
326
326
|
"currency_score": 100,
|
|
327
327
|
"currency_label": "current",
|
|
328
328
|
"forward_watch_count": 7,
|
|
@@ -331,7 +331,7 @@
|
|
|
331
331
|
{
|
|
332
332
|
"skill": "security-maturity-tiers",
|
|
333
333
|
"last_threat_review": "2026-05-01",
|
|
334
|
-
"days_since_review":
|
|
334
|
+
"days_since_review": 14,
|
|
335
335
|
"currency_score": 100,
|
|
336
336
|
"currency_label": "current",
|
|
337
337
|
"forward_watch_count": 4,
|
|
@@ -340,7 +340,7 @@
|
|
|
340
340
|
{
|
|
341
341
|
"skill": "skill-update-loop",
|
|
342
342
|
"last_threat_review": "2026-05-01",
|
|
343
|
-
"days_since_review":
|
|
343
|
+
"days_since_review": 14,
|
|
344
344
|
"currency_score": 100,
|
|
345
345
|
"currency_label": "current",
|
|
346
346
|
"forward_watch_count": 7,
|
|
@@ -349,7 +349,7 @@
|
|
|
349
349
|
{
|
|
350
350
|
"skill": "supply-chain-integrity",
|
|
351
351
|
"last_threat_review": "2026-05-11",
|
|
352
|
-
"days_since_review":
|
|
352
|
+
"days_since_review": 4,
|
|
353
353
|
"currency_score": 100,
|
|
354
354
|
"currency_label": "current",
|
|
355
355
|
"forward_watch_count": 8,
|
|
@@ -358,7 +358,7 @@
|
|
|
358
358
|
{
|
|
359
359
|
"skill": "threat-model-currency",
|
|
360
360
|
"last_threat_review": "2026-05-01",
|
|
361
|
-
"days_since_review":
|
|
361
|
+
"days_since_review": 14,
|
|
362
362
|
"currency_score": 100,
|
|
363
363
|
"currency_label": "current",
|
|
364
364
|
"forward_watch_count": 5,
|
|
@@ -367,7 +367,7 @@
|
|
|
367
367
|
{
|
|
368
368
|
"skill": "threat-modeling-methodology",
|
|
369
369
|
"last_threat_review": "2026-05-11",
|
|
370
|
-
"days_since_review":
|
|
370
|
+
"days_since_review": 4,
|
|
371
371
|
"currency_score": 100,
|
|
372
372
|
"currency_label": "current",
|
|
373
373
|
"forward_watch_count": 6,
|
|
@@ -376,7 +376,7 @@
|
|
|
376
376
|
{
|
|
377
377
|
"skill": "webapp-security",
|
|
378
378
|
"last_threat_review": "2026-05-11",
|
|
379
|
-
"days_since_review":
|
|
379
|
+
"days_since_review": 4,
|
|
380
380
|
"currency_score": 100,
|
|
381
381
|
"currency_label": "current",
|
|
382
382
|
"forward_watch_count": 1,
|
|
@@ -385,7 +385,7 @@
|
|
|
385
385
|
{
|
|
386
386
|
"skill": "zeroday-gap-learn",
|
|
387
387
|
"last_threat_review": "2026-05-01",
|
|
388
|
-
"days_since_review":
|
|
388
|
+
"days_since_review": 14,
|
|
389
389
|
"currency_score": 100,
|
|
390
390
|
"currency_label": "current",
|
|
391
391
|
"forward_watch_count": 4,
|
|
@@ -1,7 +1,7 @@
|
|
|
1
1
|
{
|
|
2
2
|
"_meta": {
|
|
3
3
|
"schema_version": "1.0.0",
|
|
4
|
-
"reference_date": "2026-05-
|
|
4
|
+
"reference_date": "2026-05-15",
|
|
5
5
|
"note": "Stale-content snapshot derived from audit-cross-skill checks. Re-runs of build-indexes against the same inputs produce byte-identical output (reference_date is manifest.threat_review_date, not 'now'). audit-cross-skill.js remains the canonical interactive audit.",
|
|
6
6
|
"finding_count": 3,
|
|
7
7
|
"by_severity": {
|