@blamejs/exceptd-skills 0.13.1 → 0.13.3

package/data/_indexes/token-budget.json

@@ -3,8 +3,8 @@
     "schema_version": "1.0.0",
     "tokenizer_note": "Character-density approximation: 1 token ≈ 4 chars. This is the canonical rule-of-thumb for OpenAI tokenizers on English+technical text. Claude's tokenizer is typically more efficient on prose; treat this as an upper-bound budget for both. Consumers with stricter precision needs should re-tokenize with their own tokenizer.",
     "approx_chars_per_token": 4,
-    "total_chars": 1610543,
-    "total_approx_tokens": 402643,
+    "total_chars": 1617909,
+    "total_approx_tokens": 404483,
     "skill_count": 42
   },
   "skills": {
@@ -555,10 +555,10 @@
     },
     "threat-model-currency": {
       "path": "skills/threat-model-currency/skill.md",
-      "bytes": 27330,
-      "chars": 27218,
-      "lines": 411,
-      "approx_tokens": 6805,
+      "bytes": 27509,
+      "chars": 27397,
+      "lines": 412,
+      "approx_tokens": 6849,
       "approx_chars_per_token": 4,
       "sections": {
         "frontmatter-scope": {
@@ -680,10 +680,10 @@
     },
     "zeroday-gap-learn": {
       "path": "skills/zeroday-gap-learn/skill.md",
-      "bytes": 37609,
-      "chars": 37453,
-      "lines": 444,
-      "approx_tokens": 9363,
+      "bytes": 37784,
+      "chars": 37628,
+      "lines": 445,
+      "approx_tokens": 9407,
       "approx_chars_per_token": 4,
       "sections": {
         "frontmatter-scope": {
@@ -820,10 +820,10 @@
     },
     "skill-update-loop": {
       "path": "skills/skill-update-loop/skill.md",
-      "bytes": 47134,
-      "chars": 47002,
-      "lines": 519,
-      "approx_tokens": 11751,
+      "bytes": 47309,
+      "chars": 47177,
+      "lines": 520,
+      "approx_tokens": 11794,
       "approx_chars_per_token": 4,
       "sections": {
         "frontmatter-scope": {
@@ -980,10 +980,10 @@
     },
     "researcher": {
       "path": "skills/researcher/skill.md",
-      "bytes": 32058,
-      "chars": 31886,
-      "lines": 335,
-      "approx_tokens": 7972,
+      "bytes": 32226,
+      "chars": 32054,
+      "lines": 336,
+      "approx_tokens": 8014,
       "approx_chars_per_token": 4,
       "sections": {
         "frontmatter-scope": {
@@ -1085,10 +1085,10 @@
     },
     "fuzz-testing-strategy": {
       "path": "skills/fuzz-testing-strategy/skill.md",
-      "bytes": 30523,
-      "chars": 30382,
-      "lines": 313,
-      "approx_tokens": 7596,
+      "bytes": 30702,
+      "chars": 30561,
+      "lines": 314,
+      "approx_tokens": 7640,
       "approx_chars_per_token": 4,
       "sections": {
         "threat-context": {
@@ -1235,10 +1235,10 @@
     },
     "defensive-countermeasure-mapping": {
       "path": "skills/defensive-countermeasure-mapping/skill.md",
-      "bytes": 32601,
-      "chars": 32465,
-      "lines": 301,
-      "approx_tokens": 8116,
+      "bytes": 32791,
+      "chars": 32655,
+      "lines": 302,
+      "approx_tokens": 8164,
       "approx_chars_per_token": 4,
       "sections": {
         "threat-context": {
@@ -1340,10 +1340,10 @@
     },
     "ot-ics-security": {
       "path": "skills/ot-ics-security/skill.md",
-      "bytes": 36266,
-      "chars": 36070,
-      "lines": 341,
-      "approx_tokens": 9018,
+      "bytes": 36439,
+      "chars": 36243,
+      "lines": 342,
+      "approx_tokens": 9061,
       "approx_chars_per_token": 4,
       "sections": {
         "threat-context": {
@@ -1450,10 +1450,10 @@
     },
     "threat-modeling-methodology": {
       "path": "skills/threat-modeling-methodology/skill.md",
-      "bytes": 30617,
-      "chars": 30440,
-      "lines": 317,
-      "approx_tokens": 7610,
+      "bytes": 30802,
+      "chars": 30625,
+      "lines": 318,
+      "approx_tokens": 7656,
       "approx_chars_per_token": 4,
       "sections": {
         "purpose": {
@@ -1510,10 +1510,10 @@
     },
     "webapp-security": {
       "path": "skills/webapp-security/skill.md",
-      "bytes": 28963,
-      "chars": 28789,
-      "lines": 282,
-      "approx_tokens": 7197,
+      "bytes": 29136,
+      "chars": 28962,
+      "lines": 283,
+      "approx_tokens": 7241,
       "approx_chars_per_token": 4,
       "sections": {
         "threat-context": {
@@ -1565,10 +1565,10 @@
     },
     "ai-risk-management": {
       "path": "skills/ai-risk-management/skill.md",
-      "bytes": 34753,
-      "chars": 34571,
-      "lines": 320,
-      "approx_tokens": 8643,
+      "bytes": 34929,
+      "chars": 34747,
+      "lines": 321,
+      "approx_tokens": 8687,
       "approx_chars_per_token": 4,
       "sections": {
         "purpose": {
@@ -1735,10 +1735,10 @@
     },
     "sector-federal-government": {
       "path": "skills/sector-federal-government/skill.md",
-      "bytes": 44140,
-      "chars": 43967,
-      "lines": 305,
-      "approx_tokens": 10992,
+      "bytes": 44323,
+      "chars": 44150,
+      "lines": 306,
+      "approx_tokens": 11038,
       "approx_chars_per_token": 4,
       "sections": {
         "threat-context": {
@@ -1790,10 +1790,10 @@
     },
     "sector-energy": {
       "path": "skills/sector-energy/skill.md",
-      "bytes": 53906,
-      "chars": 53698,
-      "lines": 409,
-      "approx_tokens": 13425,
+      "bytes": 54077,
+      "chars": 53869,
+      "lines": 410,
+      "approx_tokens": 13467,
       "approx_chars_per_token": 4,
       "sections": {
         "threat-context": {
@@ -1845,10 +1845,10 @@
     },
     "sector-telecom": {
       "path": "skills/sector-telecom/skill.md",
-      "bytes": 20690,
-      "chars": 20590,
-      "lines": 256,
-      "approx_tokens": 5148,
+      "bytes": 20862,
+      "chars": 20762,
+      "lines": 257,
+      "approx_tokens": 5191,
       "approx_chars_per_token": 4,
       "sections": {
         "threat-context": {
@@ -1900,10 +1900,10 @@
     },
     "api-security": {
       "path": "skills/api-security/skill.md",
-      "bytes": 37397,
-      "chars": 37162,
-      "lines": 294,
-      "approx_tokens": 9291,
+      "bytes": 39261,
+      "chars": 39026,
+      "lines": 304,
+      "approx_tokens": 9757,
       "approx_chars_per_token": 4,
       "sections": {
         "threat-context": {
@@ -1917,9 +1917,9 @@
           "approx_tokens": 1320
         },
         "ttp-mapping": {
-          "bytes": 2299,
-          "chars": 2269,
-          "approx_tokens": 567
+          "bytes": 2750,
+          "chars": 2720,
+          "approx_tokens": 680
         },
         "exploit-availability-matrix": {
           "bytes": 4468,
@@ -1927,9 +1927,9 @@
           "approx_tokens": 1103
         },
         "analysis-procedure": {
-          "bytes": 7799,
-          "chars": 7756,
-          "approx_tokens": 1939
+          "bytes": 8479,
+          "chars": 8436,
+          "approx_tokens": 2109
         },
         "output-format": {
           "bytes": 3718,
@@ -1942,9 +1942,9 @@
           "approx_tokens": 587
         },
         "defensive-countermeasure-mapping": {
-          "bytes": 3238,
-          "chars": 3218,
-          "approx_tokens": 805
+          "bytes": 3826,
+          "chars": 3806,
+          "approx_tokens": 952
         },
         "hand-off": {
           "bytes": 1205,
@@ -2065,10 +2065,10 @@
     },
     "mlops-security": {
       "path": "skills/mlops-security/skill.md",
-      "bytes": 45439,
-      "chars": 45147,
-      "lines": 329,
-      "approx_tokens": 11287,
+      "bytes": 45611,
+      "chars": 45319,
+      "lines": 330,
+      "approx_tokens": 11330,
       "approx_chars_per_token": 4,
       "sections": {
         "threat-context": {
@@ -2230,10 +2230,10 @@
     },
     "email-security-anti-phishing": {
       "path": "skills/email-security-anti-phishing/skill.md",
-      "bytes": 26370,
-      "chars": 26272,
-      "lines": 208,
-      "approx_tokens": 6568,
+      "bytes": 29232,
+      "chars": 29116,
+      "lines": 219,
+      "approx_tokens": 7279,
       "approx_chars_per_token": 4,
       "sections": {
         "threat-context": {
@@ -2242,14 +2242,14 @@
           "approx_tokens": 1104
         },
         "framework-lag-declaration": {
-          "bytes": 3683,
-          "chars": 3680,
-          "approx_tokens": 920
+          "bytes": 4082,
+          "chars": 4077,
+          "approx_tokens": 1019
         },
         "ttp-mapping": {
-          "bytes": 1420,
-          "chars": 1414,
-          "approx_tokens": 354
+          "bytes": 2092,
+          "chars": 2080,
+          "approx_tokens": 520
         },
         "exploit-availability-matrix": {
           "bytes": 1840,
@@ -2257,9 +2257,9 @@
           "approx_tokens": 460
         },
         "analysis-procedure": {
-          "bytes": 6759,
-          "chars": 6735,
-          "approx_tokens": 1684
+          "bytes": 7442,
+          "chars": 7416,
+          "approx_tokens": 1854
         },
         "output-format": {
           "bytes": 1821,
@@ -2272,9 +2272,9 @@
           "approx_tokens": 450
         },
         "defensive-countermeasure-mapping": {
-          "bytes": 2431,
-          "chars": 2419,
-          "approx_tokens": 605
+          "bytes": 3207,
+          "chars": 3187,
+          "approx_tokens": 797
         },
         "hand-off": {
           "bytes": 1135,
@@ -2285,10 +2285,10 @@
     },
     "age-gates-child-safety": {
       "path": "skills/age-gates-child-safety/skill.md",
-      "bytes": 69560,
-      "chars": 69272,
-      "lines": 456,
-      "approx_tokens": 17318,
+      "bytes": 69740,
+      "chars": 69452,
+      "lines": 457,
+      "approx_tokens": 17363,
       "approx_chars_per_token": 4,
       "sections": {
         "threat-context": {
@@ -2340,16 +2340,16 @@
     },
     "cloud-iam-incident": {
       "path": "skills/cloud-iam-incident/skill.md",
-      "bytes": 44467,
-      "chars": 44309,
+      "bytes": 44474,
+      "chars": 44316,
       "lines": 416,
-      "approx_tokens": 11077,
+      "approx_tokens": 11079,
       "approx_chars_per_token": 4,
       "sections": {
         "threat-context": {
-          "bytes": 5786,
-          "chars": 5772,
-          "approx_tokens": 1443
+          "bytes": 5793,
+          "chars": 5779,
+          "approx_tokens": 1445
         },
         "framework-lag-declaration": {
           "bytes": 6316,

package/data/atlas-ttps.json

@@ -85,6 +85,7 @@
     "maturity": "high",
     "last_verified": "2026-05-15",
     "cve_refs": [
+      "CVE-2026-30623",
       "CVE-2026-42945"
     ]
   },
@@ -163,6 +164,7 @@
     "maturity": "moderate",
     "last_verified": "2026-05-15",
     "cve_refs": [
+      "CVE-2023-43472",
       "CVE-2026-30615"
     ]
   },

package/data/attack-techniques.json

@@ -99,8 +99,10 @@
       "DS0017"
     ],
     "cve_refs": [
+      "CVE-2025-11837",
       "CVE-2025-53773",
       "CVE-2026-30615",
+      "CVE-2026-30623",
       "CVE-2026-32202",
       "CVE-2026-39884",
       "CVE-2026-39987",
@@ -133,6 +135,7 @@
     "name": "Exploitation for Privilege Escalation",
     "version": "v19",
     "cve_refs": [
+      "CVE-2025-62849",
       "CVE-2026-0300",
       "CVE-2026-31431",
       "CVE-2026-33825",
@@ -151,6 +154,9 @@
     "name": "Valid Accounts",
     "version": "v19",
     "cve_refs": [
+      "CVE-2020-10148",
+      "CVE-2024-1709",
+      "CVE-2026-20182",
       "CVE-2026-33825",
       "CVE-2026-39884",
       "CVE-2026-42897",
@@ -211,6 +217,7 @@
     "name": "External Remote Services",
     "version": "v19",
     "cve_refs": [
+      "CVE-2024-21762",
       "CVE-2026-0300",
       "CVE-2026-39987"
     ]
@@ -223,8 +230,17 @@
     "name": "Exploit Public-Facing Application",
     "version": "v19",
     "cve_refs": [
+      "CVE-2020-10148",
+      "CVE-2023-3519",
+      "CVE-2024-1709",
+      "CVE-2024-21762",
+      "CVE-2025-12686",
       "CVE-2025-53773",
+      "CVE-2025-59389",
+      "CVE-2025-62847",
+      "CVE-2025-62848",
       "CVE-2026-0300",
+      "CVE-2026-20182",
       "CVE-2026-32202",
       "CVE-2026-39987",
       "CVE-2026-42208",
@@ -300,7 +316,10 @@
   },
   "T1525": {
     "name": "Implant Internal Image",
-    "version": "v19"
+    "version": "v19",
+    "cve_refs": [
+      "CVE-2024-40635"
+    ]
   },
   "T1528": {
     "name": "Steal Application Access Token",
@@ -364,7 +383,8 @@
     "name": "Compromise Host Software Binary",
     "version": "v19",
     "cve_refs": [
-      "CVE-2024-3094"
+      "CVE-2024-3094",
+      "CVE-2025-11837"
     ]
   },
   "T1555": {
@@ -493,7 +513,8 @@
       "DS0029"
     ],
     "cve_refs": [
-      "CVE-2024-21626"
+      "CVE-2024-21626",
+      "CVE-2024-3154"
     ]
   },
   "T1613": {