@blamejs/exceptd-skills 0.12.6 → 0.12.8

package/data/_indexes/activity-feed.json

@@ -5,6 +5,30 @@
     "event_count": 49
   },
   "events": [
+    {
+      "date": "2026-05-13",
+      "type": "catalog_update",
+      "artifact": "data/atlas-ttps.json",
+      "path": "data/atlas-ttps.json",
+      "schema_version": "1.0.0",
+      "entry_count": 15
+    },
+    {
+      "date": "2026-05-13",
+      "type": "catalog_update",
+      "artifact": "data/cwe-catalog.json",
+      "path": "data/cwe-catalog.json",
+      "schema_version": "1.0.0",
+      "entry_count": 51
+    },
+    {
+      "date": "2026-05-13",
+      "type": "catalog_update",
+      "artifact": "data/d3fend-catalog.json",
+      "path": "data/d3fend-catalog.json",
+      "schema_version": "1.0.0",
+      "entry_count": 28
+    },
     {
       "date": "2026-05-11",
       "type": "skill_review",
@@ -174,22 +198,6 @@
       "schema_version": "1.0.0",
       "entry_count": 6
     },
-    {
-      "date": "2026-05-11",
-      "type": "catalog_update",
-      "artifact": "data/cwe-catalog.json",
-      "path": "data/cwe-catalog.json",
-      "schema_version": "1.0.0",
-      "entry_count": 34
-    },
-    {
-      "date": "2026-05-11",
-      "type": "catalog_update",
-      "artifact": "data/d3fend-catalog.json",
-      "path": "data/d3fend-catalog.json",
-      "schema_version": "1.0.0",
-      "entry_count": 20
-    },
     {
       "date": "2026-05-11",
       "type": "catalog_update",
@@ -212,7 +220,7 @@
       "artifact": "data/rfc-references.json",
       "path": "data/rfc-references.json",
       "schema_version": "1.0.0",
-      "entry_count": 19
+      "entry_count": 31
     },
     {
       "date": "2026-05-01",
@@ -319,14 +327,6 @@
       "path": "skills/security-maturity-tiers/skill.md",
       "note": "Three-tier implementation roadmap — MVP (ship this week), Practical (scalable today), Overkill (defense-in-depth)"
     },
-    {
-      "date": "2026-05-01",
-      "type": "catalog_update",
-      "artifact": "data/atlas-ttps.json",
-      "path": "data/atlas-ttps.json",
-      "schema_version": "1.0.0",
-      "entry_count": 9
-    },
     {
       "date": "2026-05-01",
       "type": "catalog_update",
@@ -341,7 +341,7 @@
       "artifact": "data/framework-control-gaps.json",
       "path": "data/framework-control-gaps.json",
       "schema_version": "1.0.0",
-      "entry_count": 49
+      "entry_count": 59
     },
     {
       "date": "2026-05-01",

package/data/_indexes/catalog-summaries.json

@@ -9,7 +9,7 @@
       "path": "data/atlas-ttps.json",
       "purpose": "MITRE ATLAS TTPs (AML.T0xxx) cited by skills, with tactic, name, description. Pinned to ATLAS v5.1.0 (November 2025).",
       "schema_version": "1.0.0",
-      "last_updated": "2026-05-01",
+      "last_updated": "2026-05-13",
       "tlp": "CLEAR",
       "source_confidence_default": "A1",
       "freshness_policy": {
@@ -18,7 +18,7 @@
         "rebuild_after_days": 365,
         "note": "Per-entry last_verified governs decay. Skills depending on this catalog must check entry freshness before high-stakes use."
       },
-      "entry_count": 9,
+      "entry_count": 15,
       "sample_keys": [
         "AML.T0043",
         "AML.T0010",
@@ -53,7 +53,7 @@
       "path": "data/cwe-catalog.json",
       "purpose": "MITRE CWE entries used by the project (subset with skill citations), with severity hint and category. Pinned to a CWE catalog version.",
       "schema_version": "1.0.0",
-      "last_updated": "2026-05-11",
+      "last_updated": "2026-05-13",
       "tlp": "CLEAR",
       "source_confidence_default": "A1",
       "freshness_policy": {
@@ -62,7 +62,7 @@
         "rebuild_after_days": 365,
         "note": "Per-entry last_verified governs decay. Skills depending on this catalog must check entry freshness before high-stakes use."
       },
-      "entry_count": 34,
+      "entry_count": 51,
       "sample_keys": [
         "CWE-787",
         "CWE-79",
@@ -75,7 +75,7 @@
       "path": "data/d3fend-catalog.json",
       "purpose": "MITRE D3FEND countermeasures (D3-xxx) keyed by id, with tactic + name. Pinned to D3FEND v1.0.0 release.",
       "schema_version": "1.0.0",
-      "last_updated": "2026-05-11",
+      "last_updated": "2026-05-13",
       "tlp": "CLEAR",
       "source_confidence_default": "A1",
       "freshness_policy": {
@@ -84,7 +84,7 @@
         "rebuild_after_days": 365,
         "note": "Per-entry last_verified governs decay. Skills depending on this catalog must check entry freshness before high-stakes use."
       },
-      "entry_count": 20,
+      "entry_count": 28,
       "sample_keys": [
         "D3-EAL",
         "D3-EHB",
@@ -150,7 +150,7 @@
         "rebuild_after_days": 365,
         "note": "Per-entry last_verified governs decay. Skills depending on this catalog must check entry freshness before high-stakes use."
       },
-      "entry_count": 49,
+      "entry_count": 59,
       "sample_keys": [
         "NIST-800-53-SI-2",
         "NIST-800-53-SC-8",
@@ -194,7 +194,7 @@
         "rebuild_after_days": 365,
         "note": "Per-entry last_verified governs decay. Skills depending on this catalog must check entry freshness before high-stakes use."
       },
-      "entry_count": 19,
+      "entry_count": 31,
       "sample_keys": [
         "RFC-8446",
         "DRAFT-IETF-TLS-ECDHE-MLKEM",

package/data/_indexes/chains.json

@@ -7148,5 +7148,243 @@
       "CVE-2025-53773",
       "CVE-2026-30615"
     ]
+  },
+  "CWE-250": {
+    "name": "Execution with Unnecessary Privileges",
+    "category": "Privilege Management",
+    "referencing_skills": [],
+    "skill_count": 0,
+    "chain": {
+      "atlas": [],
+      "attack_refs": [],
+      "framework_gaps": [],
+      "d3fend": [],
+      "rfc_refs": []
+    },
+    "related_cves": []
+  },
+  "CWE-256": {
+    "name": "Plaintext Storage of a Password",
+    "category": "Credentials Management",
+    "referencing_skills": [],
+    "skill_count": 0,
+    "chain": {
+      "atlas": [],
+      "attack_refs": [],
+      "framework_gaps": [],
+      "d3fend": [],
+      "rfc_refs": []
+    },
+    "related_cves": []
+  },
+  "CWE-284": {
+    "name": "Improper Access Control",
+    "category": "Access Control",
+    "referencing_skills": [],
+    "skill_count": 0,
+    "chain": {
+      "atlas": [],
+      "attack_refs": [],
+      "framework_gaps": [],
+      "d3fend": [],
+      "rfc_refs": []
+    },
+    "related_cves": []
+  },
+  "CWE-310": {
+    "name": "Cryptographic Issues",
+    "category": "Cryptography",
+    "referencing_skills": [],
+    "skill_count": 0,
+    "chain": {
+      "atlas": [],
+      "attack_refs": [],
+      "framework_gaps": [],
+      "d3fend": [],
+      "rfc_refs": []
+    },
+    "related_cves": []
+  },
+  "CWE-312": {
+    "name": "Cleartext Storage of Sensitive Information",
+    "category": "Data Protection",
+    "referencing_skills": [],
+    "skill_count": 0,
+    "chain": {
+      "atlas": [],
+      "attack_refs": [],
+      "framework_gaps": [],
+      "d3fend": [],
+      "rfc_refs": []
+    },
+    "related_cves": []
+  },
+  "CWE-326": {
+    "name": "Inadequate Encryption Strength",
+    "category": "Cryptography",
+    "referencing_skills": [],
+    "skill_count": 0,
+    "chain": {
+      "atlas": [],
+      "attack_refs": [],
+      "framework_gaps": [],
+      "d3fend": [],
+      "rfc_refs": []
+    },
+    "related_cves": []
+  },
+  "CWE-328": {
+    "name": "Use of Weak Hash",
+    "category": "Cryptography",
+    "referencing_skills": [],
+    "skill_count": 0,
+    "chain": {
+      "atlas": [],
+      "attack_refs": [],
+      "framework_gaps": [],
+      "d3fend": [],
+      "rfc_refs": []
+    },
+    "related_cves": []
+  },
+  "CWE-329": {
+    "name": "Generation of Predictable IV with CBC Mode",
+    "category": "Cryptography",
+    "referencing_skills": [],
+    "skill_count": 0,
+    "chain": {
+      "atlas": [],
+      "attack_refs": [],
+      "framework_gaps": [],
+      "d3fend": [],
+      "rfc_refs": []
+    },
+    "related_cves": []
+  },
+  "CWE-330": {
+    "name": "Use of Insufficiently Random Values",
+    "category": "Cryptography",
+    "referencing_skills": [],
+    "skill_count": 0,
+    "chain": {
+      "atlas": [],
+      "attack_refs": [],
+      "framework_gaps": [],
+      "d3fend": [],
+      "rfc_refs": []
+    },
+    "related_cves": []
+  },
+  "CWE-331": {
+    "name": "Insufficient Entropy",
+    "category": "Cryptography",
+    "referencing_skills": [],
+    "skill_count": 0,
+    "chain": {
+      "atlas": [],
+      "attack_refs": [],
+      "framework_gaps": [],
+      "d3fend": [],
+      "rfc_refs": []
+    },
+    "related_cves": []
+  },
+  "CWE-338": {
+    "name": "Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG)",
+    "category": "Cryptography",
+    "referencing_skills": [],
+    "skill_count": 0,
+    "chain": {
+      "atlas": [],
+      "attack_refs": [],
+      "framework_gaps": [],
+      "d3fend": [],
+      "rfc_refs": []
+    },
+    "related_cves": []
+  },
+  "CWE-353": {
+    "name": "Missing Support for Integrity Check",
+    "category": "Integrity",
+    "referencing_skills": [],
+    "skill_count": 0,
+    "chain": {
+      "atlas": [],
+      "attack_refs": [],
+      "framework_gaps": [],
+      "d3fend": [],
+      "rfc_refs": []
+    },
+    "related_cves": []
+  },
+  "CWE-426": {
+    "name": "Untrusted Search Path",
+    "category": "Privilege Management",
+    "referencing_skills": [],
+    "skill_count": 0,
+    "chain": {
+      "atlas": [],
+      "attack_refs": [],
+      "framework_gaps": [],
+      "d3fend": [],
+      "rfc_refs": []
+    },
+    "related_cves": []
+  },
+  "CWE-522": {
+    "name": "Insufficiently Protected Credentials",
+    "category": "Credentials Management",
+    "referencing_skills": [],
+    "skill_count": 0,
+    "chain": {
+      "atlas": [],
+      "attack_refs": [],
+      "framework_gaps": [],
+      "d3fend": [],
+      "rfc_refs": []
+    },
+    "related_cves": []
+  },
+  "CWE-759": {
+    "name": "Use of a One-Way Hash without a Salt",
+    "category": "Cryptography",
+    "referencing_skills": [],
+    "skill_count": 0,
+    "chain": {
+      "atlas": [],
+      "attack_refs": [],
+      "framework_gaps": [],
+      "d3fend": [],
+      "rfc_refs": []
+    },
+    "related_cves": []
+  },
+  "CWE-760": {
+    "name": "Use of a One-Way Hash with a Predictable Salt",
+    "category": "Cryptography",
+    "referencing_skills": [],
+    "skill_count": 0,
+    "chain": {
+      "atlas": [],
+      "attack_refs": [],
+      "framework_gaps": [],
+      "d3fend": [],
+      "rfc_refs": []
+    },
+    "related_cves": []
+  },
+  "CWE-916": {
+    "name": "Use of Password Hash With Insufficient Computational Effort",
+    "category": "Cryptography",
+    "referencing_skills": [],
+    "skill_count": 0,
+    "chain": {
+      "atlas": [],
+      "attack_refs": [],
+      "framework_gaps": [],
+      "d3fend": [],
+      "rfc_refs": []
+    },
+    "related_cves": []
   }
 }

package/data/_indexes/frequency.json

@@ -2039,11 +2039,69 @@
     "dlp_refs": []
   },
   "uncited": {
-    "cwe_refs": [],
-    "atlas_refs": [],
-    "d3fend_refs": [],
-    "framework_gaps": [],
-    "rfc_refs": [],
+    "cwe_refs": [
+      "CWE-250",
+      "CWE-256",
+      "CWE-284",
+      "CWE-310",
+      "CWE-312",
+      "CWE-326",
+      "CWE-328",
+      "CWE-329",
+      "CWE-330",
+      "CWE-331",
+      "CWE-338",
+      "CWE-353",
+      "CWE-426",
+      "CWE-522",
+      "CWE-759",
+      "CWE-760",
+      "CWE-916"
+    ],
+    "atlas_refs": [
+      "AML.T0024",
+      "AML.T0044",
+      "AML.T0048",
+      "AML.T0053",
+      "AML.T0055",
+      "AML.T0057"
+    ],
+    "d3fend_refs": [
+      "D3-ANCI",
+      "D3-CAA",
+      "D3-CH",
+      "D3-EI",
+      "D3-FCR",
+      "D3-KBPI",
+      "D3-SCA",
+      "D3-SFA"
+    ],
+    "framework_gaps": [
+      "AU-Essential-8-App-Hardening",
+      "AU-Essential-8-Backup",
+      "AU-Essential-8-MFA",
+      "AU-Essential-8-Patch",
+      "EU-AI-Act-Art-15",
+      "NIS2-Art21-incident-handling",
+      "UK-CAF-A1",
+      "UK-CAF-B2",
+      "UK-CAF-C1",
+      "UK-CAF-D1"
+    ],
+    "rfc_refs": [
+      "CSAF-2.0",
+      "ISO-29147",
+      "ISO-30111",
+      "RFC-6376",
+      "RFC-6545",
+      "RFC-6546",
+      "RFC-7208",
+      "RFC-7489",
+      "RFC-7970",
+      "RFC-8461",
+      "RFC-8616",
+      "RFC-9116"
+    ],
     "dlp_refs": [
       "DLP-CHAN-CLIPBOARD-AI",
       "DLP-CHAN-CODE-COMPLETION",

package/data/_indexes/jurisdiction-map.json

@@ -2,6 +2,8 @@
   "EU": {
     "skills": [
       "age-gates-child-safety",
+      "ai-attack-surface",
+      "ai-c2-detection",
       "ai-risk-management",
       "api-security",
       "attack-surface-pentest",
@@ -24,6 +26,7 @@
       "ot-ics-security",
       "policy-exception-gen",
       "pqc-first",
+      "rag-pipeline-security",
       "researcher",
       "sector-energy",
       "sector-federal-government",
@@ -38,11 +41,13 @@
       "zeroday-gap-learn"
     ],
     "example_excerpts": {},
-    "skill_count": 35
+    "skill_count": 38
   },
   "UK": {
     "skills": [
       "age-gates-child-safety",
+      "ai-attack-surface",
+      "ai-c2-detection",
       "ai-risk-management",
       "api-security",
       "attack-surface-pentest",
@@ -59,9 +64,11 @@
       "identity-assurance",
       "incident-response-playbook",
       "kernel-lpe-triage",
+      "mcp-agent-trust",
       "mlops-security",
       "ot-ics-security",
       "pqc-first",
+      "rag-pipeline-security",
       "researcher",
       "sector-energy",
       "sector-federal-government",
@@ -75,11 +82,13 @@
       "webapp-security"
     ],
     "example_excerpts": {},
-    "skill_count": 31
+    "skill_count": 35
   },
   "AU": {
     "skills": [
       "age-gates-child-safety",
+      "ai-attack-surface",
+      "ai-c2-detection",
       "ai-risk-management",
       "api-security",
       "attack-surface-pentest",
@@ -101,6 +110,7 @@
       "mlops-security",
       "ot-ics-security",
       "pqc-first",
+      "rag-pipeline-security",
       "researcher",
       "sector-energy",
       "sector-federal-government",
@@ -115,7 +125,7 @@
       "zeroday-gap-learn"
     ],
     "example_excerpts": {},
-    "skill_count": 34
+    "skill_count": 37
   },
   "SG": {
     "skills": [