@blamejs/exceptd-skills 0.12.7 → 0.12.9

package/data/_indexes/_meta.json

@@ -1,58 +1,58 @@
 {
   "schema_version": "1.1.0",
-  "generated_at": "2026-05-13T04:36:48.434Z",
+  "generated_at": "2026-05-13T15:42:51.077Z",
   "generator": "scripts/build-indexes.js",
   "source_count": 49,
   "source_hashes": {
-    "manifest.json": "d3272a211860b1c978ec1a3dbacbb859944a4ca5fe88a0c9ac86982dc2be1bca",
-    "data/atlas-ttps.json": "1500b5830dab070c4252496964a8c0948e1052a656e2c7c6e1efaf0350645e13",
-    "data/cve-catalog.json": "a2557e66c00334f9b2b07f7d1320a27fb0f82243f2ff199c4a39bf2933be5216",
-    "data/cwe-catalog.json": "c3367d469b4b3d31e4c56397dd7a8305a0be338ecd85afa27804c0c9ce12157b",
-    "data/d3fend-catalog.json": "b5cd14669e2a931d0df81bb8402f3c8ac08b0d2613e595eaecd8cc4631a57587",
+    "manifest.json": "9f566f47a27005f91dc31480151ff3c97d62f122569fc4e3b3a298c3d4e29f53",
+    "data/atlas-ttps.json": "f3f75ff2778a0a2c7d953a21386bc4f265cb2685ce41242eee45f9e9f2a6add6",
+    "data/cve-catalog.json": "ad92ef439d877b7b201f6ca4f3384d575886c389e2c845c985d17798b45a4ec6",
+    "data/cwe-catalog.json": "68e22967d39a9e22b82d7ac676125f829b551b2c2f3a9c564d3d942bf4ee6ecb",
+    "data/d3fend-catalog.json": "d219520c8d3eb61a270b25ea60f64721035e98a8d5d51d1a4e1f1140d9a586f9",
     "data/dlp-controls.json": "8ea8d907aea0a2cfd772b048a62122a322ba3284a5c36a272ad5e9d392564cb5",
     "data/exploit-availability.json": "7dad52f459c324c40aa4df7cd9157f6a19f670fdfb9d8f687d777c9d99798668",
-    "data/framework-control-gaps.json": "25db4d0cc9e6242e1143494178393ae8eab3384672ca0d685bd55c537f028c83",
+    "data/framework-control-gaps.json": "8804a10bf77e987453ea76ae717153118dc5cc625f42e98f78213b08fa144f73",
     "data/global-frameworks.json": "84fd19061f052e4ccf66308a7b8d3fd38e00325e97e9e5e19e4d9b302c128957",
-    "data/rfc-references.json": "23ffeb970af5403e9a733844dcea9b45cbae689623085f030dec826c492682e3",
+    "data/rfc-references.json": "583360bae01e324d752bd28a7d344b4276478381426428d683fc82b0ac19d64a",
     "data/zeroday-lessons.json": "0840eacd580d4ee5bd7dc44ccea6d52bfa95096576af0ccf67132eea05bedd55",
-    "skills/kernel-lpe-triage/skill.md": "c00e0a77e8b7b1a1ebcb7267dd728b39ec2671d1260bf4f6a4842f10101a69b0",
-    "skills/ai-attack-surface/skill.md": "3f5c59f1823f1552efe8a5cb32656d34d6407609ddaa1eed254c263864563453",
-    "skills/mcp-agent-trust/skill.md": "716d0d65499f8be21e0389a06a1fcaf6abd1cd2e90f068cab54471dd67127f74",
+    "skills/kernel-lpe-triage/skill.md": "e8b8601cd3b66d25150bf17f2edd2ef18f10ca6d81ee62aaf874432ee5bdc4b3",
+    "skills/ai-attack-surface/skill.md": "2775fe50d58d6437fb629b2f796714ef76ff7b86d271ee5bbd4064b9ca0b0ef6",
+    "skills/mcp-agent-trust/skill.md": "de17a4eee67096c737f2eb5972828445021e674fe6c28434cca34d290825739c",
     "skills/framework-gap-analysis/skill.md": "86c86761b91d04bcd1ec684fb3d65cf5c2881fde59b03d33fa59baddbbf64d31",
-    "skills/compliance-theater/skill.md": "dda149e69fcd92d913f3f6be4aa1aba8fe85a2b408b88c052c71174b2e0e918c",
-    "skills/exploit-scoring/skill.md": "993dbd4417018e5d20edb31ff2296b92b65fff42d2acde722c05e0be7994ddbe",
-    "skills/rag-pipeline-security/skill.md": "6274bbac1fbd164123f4d57a49c5cc7429846b7452ea476095e9dc846fdc2c42",
-    "skills/ai-c2-detection/skill.md": "afe4258fa03e3fd81ca4bb7b348cb483585eb129ebae811457810b5290080793",
-    "skills/policy-exception-gen/skill.md": "6a18b1ecd342dd792e03fcadaed3aa846192f2408c21c79d98eadd431e1619e1",
-    "skills/threat-model-currency/skill.md": "afa24a1d04202a384374598ea2d924cdaa52e264b9552bae1ace88fd39d6c0e8",
+    "skills/compliance-theater/skill.md": "e05a1df149b241421e86d81adcf4eae42697721f3a9ea8ffc54dd79cc03bd67b",
+    "skills/exploit-scoring/skill.md": "d51a5b7b614eb8d7fe539ec1943cfb6f0387e95cfe4eec39102564a9f93ac363",
+    "skills/rag-pipeline-security/skill.md": "061d9dd18fd930cddc11fdfa063847b9688d24fe785278e4d01f529f494d797c",
+    "skills/ai-c2-detection/skill.md": "a92158c113f7aa6a45be721727fda2957bbe9c52139e396e54f4bfa6a721a821",
+    "skills/policy-exception-gen/skill.md": "a6103dd567405f02ba767ee1ce2432c2c564688389efc789cf05cd61c4c8774c",
+    "skills/threat-model-currency/skill.md": "438a5f8e193a2684c37fc329ab3ab6e0d4a0365a4a04cb9e6a14fc8ddc15dfc7",
     "skills/global-grc/skill.md": "a9f4477368e260609793b77275e65e255b5c8067b7ae777047a70f3edb373e50",
-    "skills/zeroday-gap-learn/skill.md": "b101815b1c55e95706d72d31eb88153a92f41a748a86e111ad1ac06b9c676548",
+    "skills/zeroday-gap-learn/skill.md": "581ad3600287195d4e669627bcb3e07241375c11f0d68b73faad114a9e946d42",
     "skills/pqc-first/skill.md": "5b4300d71890c16b1de31d380859babaa3631729cedb0c0a397a1ff097524773",
-    "skills/skill-update-loop/skill.md": "c8bfea03c60403fb26e3ab7e07406660ef148bece9e12f9149b5171033cf5e22",
-    "skills/security-maturity-tiers/skill.md": "931d6144048308124930e8036d8e74931ca176f7315e110d33fb30880d2f5367",
-    "skills/researcher/skill.md": "40de9c281ea82e92b21856b5dde15609f187d8cddc7e4116886ac0fff9d0e269",
-    "skills/attack-surface-pentest/skill.md": "f639b6d9c19def5908eddbbb79f0514e168e74661c0894b737d7c76cbb550841",
+    "skills/skill-update-loop/skill.md": "6956359babb31e6c21e9ca3e4331b895700747a28559f8cee5d81fee9d1d8a02",
+    "skills/security-maturity-tiers/skill.md": "92470f55e07027974359a5f3945e4bce6b849fc7fb849ab543f2d457393db98b",
+    "skills/researcher/skill.md": "1d1ad5a264f964cc9042058b492a4706fb2e8d26885b1137fef790325c5805d8",
+    "skills/attack-surface-pentest/skill.md": "40f5a6a6c80e6084a1c09fb0085d0083f4970385bf76098015e57fc17ad7b326",
     "skills/fuzz-testing-strategy/skill.md": "83b1929a0d1e09a58908b91125ebc91ff14323ab9acc9bab6c4b04903b69b837",
-    "skills/dlp-gap-analysis/skill.md": "041c4c6a5299057383b1d6bd4328c1ef578f8c5c6bade8750d339c7b51020027",
-    "skills/supply-chain-integrity/skill.md": "94527929c150bf9bc7a5a61a596373d49a88ae9114adf841b2d3771e25fb8d51",
-    "skills/defensive-countermeasure-mapping/skill.md": "634f0805597a0ab417248a7413eed39b08afbc820e7c6bd257eebaa663d8990d",
-    "skills/identity-assurance/skill.md": "e8f3958ef8dd89f9276f2a62a0a1b418a206a3312bb8ff228729c8f358603dc7",
-    "skills/ot-ics-security/skill.md": "7c6eb389e7ace5b2c6e092f8dfcf4795ce1b0aefaa2738c6e383cb0fef4d6287",
-    "skills/coordinated-vuln-disclosure/skill.md": "22ba9ee01252274b1e4aa1238468415c6f564eca319c601de588fbcdd1bea3bb",
-    "skills/threat-modeling-methodology/skill.md": "9e1ee084a56f837074a41b7a7929b1deb5619bb483485aa066b0c26990fe70db",
-    "skills/webapp-security/skill.md": "10a17ab8d3f0e9b1107f7bed5ff2881f59234592b57f2a52c8c397d711604ffb",
-    "skills/ai-risk-management/skill.md": "6062be4e748606ca7536bba3d87e25716795d5690a0063f188325e8e68291cb6",
-    "skills/sector-healthcare/skill.md": "01dd58ed20b3f97dc240e1b77a522f780bd9428294ac9ac78d51817150b55476",
-    "skills/sector-financial/skill.md": "52bdf30cece82381ea8a4023838aa61a2b9026f315a1356aabb638e49bf7b6d9",
-    "skills/sector-federal-government/skill.md": "e1443a3f788050fd5d63d001a3aafbd3244280399ccdec595d7807de547614d4",
-    "skills/sector-energy/skill.md": "068996fa85cc9d8d7f890b185a38619602cb3bab89704d3bfc85c99cbddaafb8",
-    "skills/api-security/skill.md": "131de2913341f794585091b72522b0e0b8d7dd42eca4faf8ea7315d27b5a5c6f",
-    "skills/cloud-security/skill.md": "26e533f5fa4876cb611cfa026fb7e6417927dd4c2e04f50e42fc08016c40274b",
-    "skills/container-runtime-security/skill.md": "7c62132c189edfe0e803c1cc2a688cef7b6ddd2d3be8c5d74a807293f14e0790",
-    "skills/mlops-security/skill.md": "78bb564f841f2c60ea48790ba686ba1e3f628afd402c96847177cc7e05fba4de",
-    "skills/incident-response-playbook/skill.md": "ede731be2bd673d65a8b7509ca3e2eb9af800186780a99c0369e15b2459d7cb6",
-    "skills/email-security-anti-phishing/skill.md": "9dfc1ca36f3059bb8f1cbc566d1358d1c797bb8f51d7bd62a70df8505563ab23",
-    "skills/age-gates-child-safety/skill.md": "f477320c9727986a44f38dc470e61a2c50bf9eef0a6a4c4ab1f14462dfa94f73"
+    "skills/dlp-gap-analysis/skill.md": "61149c692de109d5cfd00cada60478539f28374380b5ce17017603d71967ab58",
+    "skills/supply-chain-integrity/skill.md": "961eb734df9965fa726720ac9f849bdcdc32108625d1d589602005967b836ea8",
+    "skills/defensive-countermeasure-mapping/skill.md": "e62c71ba3be2b4d0f7dfa529fec007cba6bee3013f76b93756e3e6310f2d22ab",
+    "skills/identity-assurance/skill.md": "a4aff24b0d0f4684d144f85cbc74c8a9a5711a7ec9c6d473f677f053dc1c658c",
+    "skills/ot-ics-security/skill.md": "500a002b662217393243d093efa639cdf30ca76d1869d6c1896425492c5d652e",
+    "skills/coordinated-vuln-disclosure/skill.md": "c96fd2254abf8a29819f8175da85094bea1afe589fecc92abcf1289b30895030",
+    "skills/threat-modeling-methodology/skill.md": "eb03a6c12c637c38917fecd97007459dfe99cbab5dfae696a736f08db13c124c",
+    "skills/webapp-security/skill.md": "009d9050e3c27f789efbc4c0dba4245b66d49182b503736be6a344591ba93f54",
+    "skills/ai-risk-management/skill.md": "1bbdba6b46efba8c88f8e7e1930777d39a65709ea434b6a53eed01814fa9fdad",
+    "skills/sector-healthcare/skill.md": "43608ca43eefc3a9238f6c6b0c7993e519420ffab5a18d96e17310f44ac6225a",
+    "skills/sector-financial/skill.md": "d7b538cd71a8384c9e19a86e7971049f2c1f651677e4ab9b5a1caf9526b178da",
+    "skills/sector-federal-government/skill.md": "0d18ede4d0c04975ea22bfa53b0f6d62eeb70861e16a27d239d25928fa3ff21f",
+    "skills/sector-energy/skill.md": "07ca8b582b3a94657006395ce0ef15ecb2030f676f119900b4fdb9b213f04200",
+    "skills/api-security/skill.md": "99af9882f57e884b3f66f1c17a4bc6ee24ed6531f0e28b3bdeccd5d77429ffa6",
+    "skills/cloud-security/skill.md": "18fc0f16689f3560023c9d919bec03070d3c2198dc186d1b7ca9cfe35fbfa108",
+    "skills/container-runtime-security/skill.md": "f481878aa40c42662424d32b320fc825e2550b7874224765e2150a97f0afeafb",
+    "skills/mlops-security/skill.md": "c9fb9281191b2684424f96b3d4447fe40907f633b0506e22100d909141f497be",
+    "skills/incident-response-playbook/skill.md": "27202d956fcc06c0cef7ad1ca6f352e2cdf06189516e22f796704a44c2ab2734",
+    "skills/email-security-anti-phishing/skill.md": "90e15fb89a36ac704cb092801130351a5c33bb7154bd023a347309c1a6a4f164",
+    "skills/age-gates-child-safety/skill.md": "c741d7dca9da0abb09bdebb8a02e803ce4ae9fb9a6904fb8df3ec19cae83917d"
   },
   "skill_count": 38,
   "catalog_count": 10,
@@ -68,12 +68,12 @@
     },
     "trigger_table_entries": 453,
     "chains_cve_entries": 6,
-    "chains_cwe_entries": 34,
+    "chains_cwe_entries": 51,
     "jurisdictions_indexed": 29,
     "handoff_dag_nodes": 38,
     "summary_cards": 38,
     "section_offsets_skills": 38,
-    "token_budget_total_approx": 334832,
+    "token_budget_total_approx": 342364,
     "recipes": 8,
     "jurisdiction_clocks": 29,
     "did_ladders": 8,

package/data/_indexes/activity-feed.json

@@ -5,6 +5,38 @@
     "event_count": 49
   },
   "events": [
+    {
+      "date": "2026-05-13",
+      "type": "catalog_update",
+      "artifact": "data/atlas-ttps.json",
+      "path": "data/atlas-ttps.json",
+      "schema_version": "1.0.0",
+      "entry_count": 15
+    },
+    {
+      "date": "2026-05-13",
+      "type": "catalog_update",
+      "artifact": "data/cve-catalog.json",
+      "path": "data/cve-catalog.json",
+      "schema_version": "1.0.0",
+      "entry_count": 6
+    },
+    {
+      "date": "2026-05-13",
+      "type": "catalog_update",
+      "artifact": "data/cwe-catalog.json",
+      "path": "data/cwe-catalog.json",
+      "schema_version": "1.0.0",
+      "entry_count": 51
+    },
+    {
+      "date": "2026-05-13",
+      "type": "catalog_update",
+      "artifact": "data/d3fend-catalog.json",
+      "path": "data/d3fend-catalog.json",
+      "schema_version": "1.0.0",
+      "entry_count": 28
+    },
     {
       "date": "2026-05-11",
       "type": "skill_review",
@@ -166,30 +198,6 @@
       "path": "skills/age-gates-child-safety/skill.md",
       "note": "Age-related gates and child online safety for mid-2026 — COPPA + CIPA + California AADC + GDPR Art. 8 + DSA Art. 28 + UK Online Safety Act + UK Children's Code + AU Online Safety Act + IN DPDPA child provisions + KOSA pending; age verification standards (IEEE 2089-2021, OpenID Connect age claims); AI product age policies"
     },
-    {
-      "date": "2026-05-11",
-      "type": "catalog_update",
-      "artifact": "data/cve-catalog.json",
-      "path": "data/cve-catalog.json",
-      "schema_version": "1.0.0",
-      "entry_count": 6
-    },
-    {
-      "date": "2026-05-11",
-      "type": "catalog_update",
-      "artifact": "data/cwe-catalog.json",
-      "path": "data/cwe-catalog.json",
-      "schema_version": "1.0.0",
-      "entry_count": 34
-    },
-    {
-      "date": "2026-05-11",
-      "type": "catalog_update",
-      "artifact": "data/d3fend-catalog.json",
-      "path": "data/d3fend-catalog.json",
-      "schema_version": "1.0.0",
-      "entry_count": 20
-    },
     {
       "date": "2026-05-11",
       "type": "catalog_update",
@@ -212,7 +220,7 @@
       "artifact": "data/rfc-references.json",
       "path": "data/rfc-references.json",
       "schema_version": "1.0.0",
-      "entry_count": 19
+      "entry_count": 31
     },
     {
       "date": "2026-05-01",
@@ -319,14 +327,6 @@
       "path": "skills/security-maturity-tiers/skill.md",
       "note": "Three-tier implementation roadmap — MVP (ship this week), Practical (scalable today), Overkill (defense-in-depth)"
     },
-    {
-      "date": "2026-05-01",
-      "type": "catalog_update",
-      "artifact": "data/atlas-ttps.json",
-      "path": "data/atlas-ttps.json",
-      "schema_version": "1.0.0",
-      "entry_count": 9
-    },
     {
       "date": "2026-05-01",
       "type": "catalog_update",
@@ -341,7 +341,7 @@
       "artifact": "data/framework-control-gaps.json",
       "path": "data/framework-control-gaps.json",
       "schema_version": "1.0.0",
-      "entry_count": 49
+      "entry_count": 59
     },
     {
       "date": "2026-05-01",

package/data/_indexes/catalog-summaries.json

@@ -9,7 +9,7 @@
       "path": "data/atlas-ttps.json",
       "purpose": "MITRE ATLAS TTPs (AML.T0xxx) cited by skills, with tactic, name, description. Pinned to ATLAS v5.1.0 (November 2025).",
       "schema_version": "1.0.0",
-      "last_updated": "2026-05-01",
+      "last_updated": "2026-05-13",
       "tlp": "CLEAR",
       "source_confidence_default": "A1",
       "freshness_policy": {
@@ -18,7 +18,7 @@
         "rebuild_after_days": 365,
         "note": "Per-entry last_verified governs decay. Skills depending on this catalog must check entry freshness before high-stakes use."
       },
-      "entry_count": 9,
+      "entry_count": 15,
       "sample_keys": [
         "AML.T0043",
         "AML.T0010",
@@ -31,7 +31,7 @@
       "path": "data/cve-catalog.json",
       "purpose": "Per-CVE record (CVSS, EPSS, CISA KEV, RWEP, AI-discovery, vendor advisories, framework gaps, ATLAS/ATT&CK mappings). Cross-validated against NVD + CISA KEV + FIRST EPSS via validate-cves.",
       "schema_version": "1.0.0",
-      "last_updated": "2026-05-11",
+      "last_updated": "2026-05-13",
       "tlp": "CLEAR",
       "source_confidence_default": "A1",
       "freshness_policy": {
@@ -53,7 +53,7 @@
       "path": "data/cwe-catalog.json",
       "purpose": "MITRE CWE entries used by the project (subset with skill citations), with severity hint and category. Pinned to a CWE catalog version.",
       "schema_version": "1.0.0",
-      "last_updated": "2026-05-11",
+      "last_updated": "2026-05-13",
       "tlp": "CLEAR",
       "source_confidence_default": "A1",
       "freshness_policy": {
@@ -62,7 +62,7 @@
         "rebuild_after_days": 365,
         "note": "Per-entry last_verified governs decay. Skills depending on this catalog must check entry freshness before high-stakes use."
       },
-      "entry_count": 34,
+      "entry_count": 51,
       "sample_keys": [
         "CWE-787",
         "CWE-79",
@@ -75,7 +75,7 @@
       "path": "data/d3fend-catalog.json",
       "purpose": "MITRE D3FEND countermeasures (D3-xxx) keyed by id, with tactic + name. Pinned to D3FEND v1.0.0 release.",
       "schema_version": "1.0.0",
-      "last_updated": "2026-05-11",
+      "last_updated": "2026-05-13",
       "tlp": "CLEAR",
       "source_confidence_default": "A1",
       "freshness_policy": {
@@ -84,7 +84,7 @@
         "rebuild_after_days": 365,
         "note": "Per-entry last_verified governs decay. Skills depending on this catalog must check entry freshness before high-stakes use."
       },
-      "entry_count": 20,
+      "entry_count": 28,
       "sample_keys": [
         "D3-EAL",
         "D3-EHB",
@@ -150,7 +150,7 @@
         "rebuild_after_days": 365,
         "note": "Per-entry last_verified governs decay. Skills depending on this catalog must check entry freshness before high-stakes use."
       },
-      "entry_count": 49,
+      "entry_count": 59,
       "sample_keys": [
         "NIST-800-53-SI-2",
         "NIST-800-53-SC-8",
@@ -194,7 +194,7 @@
         "rebuild_after_days": 365,
         "note": "Per-entry last_verified governs decay. Skills depending on this catalog must check entry freshness before high-stakes use."
       },
-      "entry_count": 19,
+      "entry_count": 31,
       "sample_keys": [
         "RFC-8446",
         "DRAFT-IETF-TLS-ECDHE-MLKEM",

package/data/_indexes/chains.json

@@ -12,8 +12,8 @@
     "rwep": 90,
     "cvss": 7.8,
     "cisa_kev": true,
-    "epss_score": 0.94,
-    "epss_percentile": 0.99,
+    "epss_score": 0.0257,
+    "epss_percentile": 0.8569,
     "referencing_skills": [
       "kernel-lpe-triage",
       "exploit-scoring",
@@ -271,10 +271,10 @@
   "CVE-2026-43284": {
     "name": "Dirty Frag (ESP/IPsec component)",
     "rwep": 38,
-    "cvss": 7.8,
+    "cvss": 8.8,
     "cisa_kev": false,
-    "epss_score": 0.18,
-    "epss_percentile": 0.88,
+    "epss_score": 0.00007,
+    "epss_percentile": 0.0051,
     "referencing_skills": [
       "kernel-lpe-triage",
       "pqc-first",
@@ -483,8 +483,8 @@
     "rwep": 32,
     "cvss": 7.6,
     "cisa_kev": false,
-    "epss_score": 0.07,
-    "epss_percentile": 0.75,
+    "epss_score": 0.0001,
+    "epss_percentile": 0.0115,
     "referencing_skills": [
       "kernel-lpe-triage",
       "pqc-first",
@@ -1251,9 +1251,9 @@
     }
   },
   "CVE-2026-30615": {
-    "name": "Windsurf MCP Zero-Interaction RCE",
+    "name": "Windsurf MCP Local-Vector RCE via Adversarial Tool Response",
     "rwep": 35,
-    "cvss": 9.8,
+    "cvss": 8,
     "cisa_kev": false,
     "epss_score": 0.14,
     "epss_percentile": 0.86,
@@ -1756,8 +1756,8 @@
     "rwep": 45,
     "cvss": 9.6,
     "cisa_kev": false,
-    "epss_score": 0.78,
-    "epss_percentile": 0.97,
+    "epss_score": 0.00039,
+    "epss_percentile": 0.1179,
     "referencing_skills": [],
     "chain": {
       "cwes": [],
@@ -7148,5 +7148,243 @@
       "CVE-2025-53773",
       "CVE-2026-30615"
     ]
+  },
+  "CWE-250": {
+    "name": "Execution with Unnecessary Privileges",
+    "category": "Privilege Management",
+    "referencing_skills": [],
+    "skill_count": 0,
+    "chain": {
+      "atlas": [],
+      "attack_refs": [],
+      "framework_gaps": [],
+      "d3fend": [],
+      "rfc_refs": []
+    },
+    "related_cves": []
+  },
+  "CWE-256": {
+    "name": "Plaintext Storage of a Password",
+    "category": "Credentials Management",
+    "referencing_skills": [],
+    "skill_count": 0,
+    "chain": {
+      "atlas": [],
+      "attack_refs": [],
+      "framework_gaps": [],
+      "d3fend": [],
+      "rfc_refs": []
+    },
+    "related_cves": []
+  },
+  "CWE-284": {
+    "name": "Improper Access Control",
+    "category": "Access Control",
+    "referencing_skills": [],
+    "skill_count": 0,
+    "chain": {
+      "atlas": [],
+      "attack_refs": [],
+      "framework_gaps": [],
+      "d3fend": [],
+      "rfc_refs": []
+    },
+    "related_cves": []
+  },
+  "CWE-310": {
+    "name": "Cryptographic Issues",
+    "category": "Cryptography",
+    "referencing_skills": [],
+    "skill_count": 0,
+    "chain": {
+      "atlas": [],
+      "attack_refs": [],
+      "framework_gaps": [],
+      "d3fend": [],
+      "rfc_refs": []
+    },
+    "related_cves": []
+  },
+  "CWE-312": {
+    "name": "Cleartext Storage of Sensitive Information",
+    "category": "Data Protection",
+    "referencing_skills": [],
+    "skill_count": 0,
+    "chain": {
+      "atlas": [],
+      "attack_refs": [],
+      "framework_gaps": [],
+      "d3fend": [],
+      "rfc_refs": []
+    },
+    "related_cves": []
+  },
+  "CWE-326": {
+    "name": "Inadequate Encryption Strength",
+    "category": "Cryptography",
+    "referencing_skills": [],
+    "skill_count": 0,
+    "chain": {
+      "atlas": [],
+      "attack_refs": [],
+      "framework_gaps": [],
+      "d3fend": [],
+      "rfc_refs": []
+    },
+    "related_cves": []
+  },
+  "CWE-328": {
+    "name": "Use of Weak Hash",
+    "category": "Cryptography",
+    "referencing_skills": [],
+    "skill_count": 0,
+    "chain": {
+      "atlas": [],
+      "attack_refs": [],
+      "framework_gaps": [],
+      "d3fend": [],
+      "rfc_refs": []
+    },
+    "related_cves": []
+  },
+  "CWE-329": {
+    "name": "Generation of Predictable IV with CBC Mode",
+    "category": "Cryptography",
+    "referencing_skills": [],
+    "skill_count": 0,
+    "chain": {
+      "atlas": [],
+      "attack_refs": [],
+      "framework_gaps": [],
+      "d3fend": [],
+      "rfc_refs": []
+    },
+    "related_cves": []
+  },
+  "CWE-330": {
+    "name": "Use of Insufficiently Random Values",
+    "category": "Cryptography",
+    "referencing_skills": [],
+    "skill_count": 0,
+    "chain": {
+      "atlas": [],
+      "attack_refs": [],
+      "framework_gaps": [],
+      "d3fend": [],
+      "rfc_refs": []
+    },
+    "related_cves": []
+  },
+  "CWE-331": {
+    "name": "Insufficient Entropy",
+    "category": "Cryptography",
+    "referencing_skills": [],
+    "skill_count": 0,
+    "chain": {
+      "atlas": [],
+      "attack_refs": [],
+      "framework_gaps": [],
+      "d3fend": [],
+      "rfc_refs": []
+    },
+    "related_cves": []
+  },
+  "CWE-338": {
+    "name": "Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG)",
+    "category": "Cryptography",
+    "referencing_skills": [],
+    "skill_count": 0,
+    "chain": {
+      "atlas": [],
+      "attack_refs": [],
+      "framework_gaps": [],
+      "d3fend": [],
+      "rfc_refs": []
+    },
+    "related_cves": []
+  },
+  "CWE-353": {
+    "name": "Missing Support for Integrity Check",
+    "category": "Integrity",
+    "referencing_skills": [],
+    "skill_count": 0,
+    "chain": {
+      "atlas": [],
+      "attack_refs": [],
+      "framework_gaps": [],
+      "d3fend": [],
+      "rfc_refs": []
+    },
+    "related_cves": []
+  },
+  "CWE-426": {
+    "name": "Untrusted Search Path",
+    "category": "Privilege Management",
+    "referencing_skills": [],
+    "skill_count": 0,
+    "chain": {
+      "atlas": [],
+      "attack_refs": [],
+      "framework_gaps": [],
+      "d3fend": [],
+      "rfc_refs": []
+    },
+    "related_cves": []
+  },
+  "CWE-522": {
+    "name": "Insufficiently Protected Credentials",
+    "category": "Credentials Management",
+    "referencing_skills": [],
+    "skill_count": 0,
+    "chain": {
+      "atlas": [],
+      "attack_refs": [],
+      "framework_gaps": [],
+      "d3fend": [],
+      "rfc_refs": []
+    },
+    "related_cves": []
+  },
+  "CWE-759": {
+    "name": "Use of a One-Way Hash without a Salt",
+    "category": "Cryptography",
+    "referencing_skills": [],
+    "skill_count": 0,
+    "chain": {
+      "atlas": [],
+      "attack_refs": [],
+      "framework_gaps": [],
+      "d3fend": [],
+      "rfc_refs": []
+    },
+    "related_cves": []
+  },
+  "CWE-760": {
+    "name": "Use of a One-Way Hash with a Predictable Salt",
+    "category": "Cryptography",
+    "referencing_skills": [],
+    "skill_count": 0,
+    "chain": {
+      "atlas": [],
+      "attack_refs": [],
+      "framework_gaps": [],
+      "d3fend": [],
+      "rfc_refs": []
+    },
+    "related_cves": []
+  },
+  "CWE-916": {
+    "name": "Use of Password Hash With Insufficient Computational Effort",
+    "category": "Cryptography",
+    "referencing_skills": [],
+    "skill_count": 0,
+    "chain": {
+      "atlas": [],
+      "attack_refs": [],
+      "framework_gaps": [],
+      "d3fend": [],
+      "rfc_refs": []
+    },
+    "related_cves": []
   }
 }