@blamejs/exceptd-skills 0.13.4 → 0.13.6
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/AGENTS.md +16 -0
- package/CHANGELOG.md +58 -0
- package/bin/exceptd.js +145 -17
- package/data/_indexes/_meta.json +8 -8
- package/data/_indexes/activity-feed.json +18 -18
- package/data/_indexes/catalog-summaries.json +6 -6
- package/data/_indexes/chains.json +3943 -0
- package/data/_indexes/frequency.json +3 -0
- package/data/atlas-ttps.json +74 -1
- package/data/attack-techniques.json +125 -8
- package/data/cve-catalog.json +1964 -2
- package/data/framework-control-gaps.json +47 -4
- package/data/playbooks/ai-discovered-cve-triage.json +1146 -0
- package/data/playbooks/cicd-pipeline-compromise.json +3 -0
- package/data/playbooks/cred-stores.json +1 -0
- package/data/playbooks/crypto.json +3 -0
- package/data/playbooks/framework.json +3 -0
- package/data/playbooks/idp-incident.json +2 -1
- package/data/playbooks/kernel.json +1 -0
- package/data/playbooks/mcp.json +27 -2
- package/data/playbooks/post-quantum-migration.json +1268 -0
- package/data/playbooks/runtime.json +1 -0
- package/data/playbooks/sbom.json +3 -0
- package/data/playbooks/supply-chain-recovery.json +1332 -0
- package/data/zeroday-lessons.json +1749 -2
- package/lib/schemas/cve-catalog.schema.json +2 -1
- package/lib/validate-cve-catalog.js +27 -0
- package/manifest.json +44 -44
- package/orchestrator/index.js +69 -2
- package/package.json +1 -1
- package/sbom.cdx.json +62 -29
package/sbom.cdx.json
CHANGED
|
@@ -1,22 +1,22 @@
|
|
|
1
1
|
{
|
|
2
2
|
"bomFormat": "CycloneDX",
|
|
3
3
|
"specVersion": "1.6",
|
|
4
|
-
"serialNumber": "urn:uuid:
|
|
4
|
+
"serialNumber": "urn:uuid:991e46c6-7e03-4e58-b3d5-d9677f1851b4",
|
|
5
5
|
"version": 1,
|
|
6
6
|
"metadata": {
|
|
7
|
-
"timestamp": "
|
|
7
|
+
"timestamp": "2107-05-29T14:50:46.000Z",
|
|
8
8
|
"tools": [
|
|
9
9
|
{
|
|
10
10
|
"vendor": "blamejs",
|
|
11
11
|
"name": "scripts/refresh-sbom.js",
|
|
12
|
-
"version": "0.13.
|
|
12
|
+
"version": "0.13.6"
|
|
13
13
|
}
|
|
14
14
|
],
|
|
15
15
|
"component": {
|
|
16
|
-
"bom-ref": "pkg:npm/@blamejs/exceptd-skills@0.13.
|
|
16
|
+
"bom-ref": "pkg:npm/@blamejs/exceptd-skills@0.13.6",
|
|
17
17
|
"type": "application",
|
|
18
18
|
"name": "@blamejs/exceptd-skills",
|
|
19
|
-
"version": "0.13.
|
|
19
|
+
"version": "0.13.6",
|
|
20
20
|
"description": "AI security skills grounded in mid-2026 threat reality, not stale framework documentation. 42 skills, 10 catalogs, 34 jurisdictions, pre-computed indexes, Ed25519-signed.",
|
|
21
21
|
"licenses": [
|
|
22
22
|
{
|
|
@@ -25,17 +25,17 @@
|
|
|
25
25
|
}
|
|
26
26
|
}
|
|
27
27
|
],
|
|
28
|
-
"purl": "pkg:npm/%40blamejs/exceptd-skills@0.13.
|
|
28
|
+
"purl": "pkg:npm/%40blamejs/exceptd-skills@0.13.6",
|
|
29
29
|
"hashes": [
|
|
30
30
|
{
|
|
31
31
|
"alg": "SHA-256",
|
|
32
|
-
"content": "
|
|
32
|
+
"content": "9b0c0a954ff7a0ac338dd607dd04dd9de815632f49b2437476d22e55c9ca0e3a"
|
|
33
33
|
}
|
|
34
34
|
],
|
|
35
35
|
"externalReferences": [
|
|
36
36
|
{
|
|
37
37
|
"type": "distribution",
|
|
38
|
-
"url": "https://www.npmjs.com/package/@blamejs/exceptd-skills/v/0.13.
|
|
38
|
+
"url": "https://www.npmjs.com/package/@blamejs/exceptd-skills/v/0.13.6"
|
|
39
39
|
},
|
|
40
40
|
{
|
|
41
41
|
"type": "vcs",
|
|
@@ -86,7 +86,7 @@
|
|
|
86
86
|
"hashes": [
|
|
87
87
|
{
|
|
88
88
|
"alg": "SHA-256",
|
|
89
|
-
"content": "
|
|
89
|
+
"content": "5568bcb1a15cf38025e676f3c76fe7f0ed1b8c0e0aaf5006ffcb0428a02bbb23"
|
|
90
90
|
}
|
|
91
91
|
]
|
|
92
92
|
},
|
|
@@ -108,7 +108,7 @@
|
|
|
108
108
|
"hashes": [
|
|
109
109
|
{
|
|
110
110
|
"alg": "SHA-256",
|
|
111
|
-
"content": "
|
|
111
|
+
"content": "c1cfd976dd6705323cb1a2cf5cad30bc3c768688e44bb6b094cc51d74964d440"
|
|
112
112
|
}
|
|
113
113
|
]
|
|
114
114
|
},
|
|
@@ -229,7 +229,7 @@
|
|
|
229
229
|
"hashes": [
|
|
230
230
|
{
|
|
231
231
|
"alg": "SHA-256",
|
|
232
|
-
"content": "
|
|
232
|
+
"content": "cb2023747859fffb7add00d22d469bad388686e7fec621a059880ac7d3f6ac00"
|
|
233
233
|
}
|
|
234
234
|
]
|
|
235
235
|
},
|
|
@@ -240,7 +240,7 @@
|
|
|
240
240
|
"hashes": [
|
|
241
241
|
{
|
|
242
242
|
"alg": "SHA-256",
|
|
243
|
-
"content": "
|
|
243
|
+
"content": "c2aee9c70ec24cf48f1ea4daf170aa6e7b93292888239c46a8ec9e522ee32119"
|
|
244
244
|
}
|
|
245
245
|
]
|
|
246
246
|
},
|
|
@@ -251,7 +251,7 @@
|
|
|
251
251
|
"hashes": [
|
|
252
252
|
{
|
|
253
253
|
"alg": "SHA-256",
|
|
254
|
-
"content": "
|
|
254
|
+
"content": "29cd5690040c7153dbf293b7e3a99b72fc897b0495478e369f7ce7004b8d64f4"
|
|
255
255
|
}
|
|
256
256
|
]
|
|
257
257
|
},
|
|
@@ -262,7 +262,7 @@
|
|
|
262
262
|
"hashes": [
|
|
263
263
|
{
|
|
264
264
|
"alg": "SHA-256",
|
|
265
|
-
"content": "
|
|
265
|
+
"content": "b3731361d298483648264215fd8dbfca36d0f4e2ead4aebf7c49718e12038e1f"
|
|
266
266
|
}
|
|
267
267
|
]
|
|
268
268
|
},
|
|
@@ -317,7 +317,7 @@
|
|
|
317
317
|
"hashes": [
|
|
318
318
|
{
|
|
319
319
|
"alg": "SHA-256",
|
|
320
|
-
"content": "
|
|
320
|
+
"content": "d49c75de55e6e1dabec46e6e975619489a2093b0be53c2a0b654e5c1826fbe46"
|
|
321
321
|
}
|
|
322
322
|
]
|
|
323
323
|
},
|
|
@@ -343,6 +343,17 @@
|
|
|
343
343
|
}
|
|
344
344
|
]
|
|
345
345
|
},
|
|
346
|
+
{
|
|
347
|
+
"bom-ref": "file:data/playbooks/ai-discovered-cve-triage.json",
|
|
348
|
+
"type": "file",
|
|
349
|
+
"name": "data/playbooks/ai-discovered-cve-triage.json",
|
|
350
|
+
"hashes": [
|
|
351
|
+
{
|
|
352
|
+
"alg": "SHA-256",
|
|
353
|
+
"content": "1f49d4b257eac755cfda0131583d7815c5a7cabf0fb776e2e478ef519900d77b"
|
|
354
|
+
}
|
|
355
|
+
]
|
|
356
|
+
},
|
|
346
357
|
{
|
|
347
358
|
"bom-ref": "file:data/playbooks/cicd-pipeline-compromise.json",
|
|
348
359
|
"type": "file",
|
|
@@ -350,7 +361,7 @@
|
|
|
350
361
|
"hashes": [
|
|
351
362
|
{
|
|
352
363
|
"alg": "SHA-256",
|
|
353
|
-
"content": "
|
|
364
|
+
"content": "78e2d945e95a5de64d72b8ea16183d8a738dce0988ad092a8b1a86a59222b029"
|
|
354
365
|
}
|
|
355
366
|
]
|
|
356
367
|
},
|
|
@@ -383,7 +394,7 @@
|
|
|
383
394
|
"hashes": [
|
|
384
395
|
{
|
|
385
396
|
"alg": "SHA-256",
|
|
386
|
-
"content": "
|
|
397
|
+
"content": "a34da63059b10b4c2887e8715aac60c1e9a3dadb0977615ee5cf02d8fda479b5"
|
|
387
398
|
}
|
|
388
399
|
]
|
|
389
400
|
},
|
|
@@ -405,7 +416,7 @@
|
|
|
405
416
|
"hashes": [
|
|
406
417
|
{
|
|
407
418
|
"alg": "SHA-256",
|
|
408
|
-
"content": "
|
|
419
|
+
"content": "c1d47ce98f77230f2d52527a1f4a4599b8ec93443fbe6afb83561f24d6b571ba"
|
|
409
420
|
}
|
|
410
421
|
]
|
|
411
422
|
},
|
|
@@ -416,7 +427,7 @@
|
|
|
416
427
|
"hashes": [
|
|
417
428
|
{
|
|
418
429
|
"alg": "SHA-256",
|
|
419
|
-
"content": "
|
|
430
|
+
"content": "62198e2c0d16c91da9357daf7c73c600b4987fe48d3b57938f4395ca5d901e27"
|
|
420
431
|
}
|
|
421
432
|
]
|
|
422
433
|
},
|
|
@@ -449,7 +460,7 @@
|
|
|
449
460
|
"hashes": [
|
|
450
461
|
{
|
|
451
462
|
"alg": "SHA-256",
|
|
452
|
-
"content": "
|
|
463
|
+
"content": "dfa6edcde573ebb4c4a68ddffe3f719f15ab49515fa17c310d34f783c085fbba"
|
|
453
464
|
}
|
|
454
465
|
]
|
|
455
466
|
},
|
|
@@ -460,7 +471,7 @@
|
|
|
460
471
|
"hashes": [
|
|
461
472
|
{
|
|
462
473
|
"alg": "SHA-256",
|
|
463
|
-
"content": "
|
|
474
|
+
"content": "ed01d7a14ac6ac485569aea80cd58584f94da72b3227393a070c9098163b111f"
|
|
464
475
|
}
|
|
465
476
|
]
|
|
466
477
|
},
|
|
@@ -493,7 +504,18 @@
|
|
|
493
504
|
"hashes": [
|
|
494
505
|
{
|
|
495
506
|
"alg": "SHA-256",
|
|
496
|
-
"content": "
|
|
507
|
+
"content": "91bbe085689c3569c9731f41b87c1ba61879220a67127b60f94f59045f0f82d9"
|
|
508
|
+
}
|
|
509
|
+
]
|
|
510
|
+
},
|
|
511
|
+
{
|
|
512
|
+
"bom-ref": "file:data/playbooks/post-quantum-migration.json",
|
|
513
|
+
"type": "file",
|
|
514
|
+
"name": "data/playbooks/post-quantum-migration.json",
|
|
515
|
+
"hashes": [
|
|
516
|
+
{
|
|
517
|
+
"alg": "SHA-256",
|
|
518
|
+
"content": "59c58097750eff57414a308ede38e51a5cf789ec81c706cd7c58a113a163bba9"
|
|
497
519
|
}
|
|
498
520
|
]
|
|
499
521
|
},
|
|
@@ -515,7 +537,7 @@
|
|
|
515
537
|
"hashes": [
|
|
516
538
|
{
|
|
517
539
|
"alg": "SHA-256",
|
|
518
|
-
"content": "
|
|
540
|
+
"content": "27607530186a6611e05f49597894a66611cf526f14eb401999facaf1ea82e89f"
|
|
519
541
|
}
|
|
520
542
|
]
|
|
521
543
|
},
|
|
@@ -526,7 +548,7 @@
|
|
|
526
548
|
"hashes": [
|
|
527
549
|
{
|
|
528
550
|
"alg": "SHA-256",
|
|
529
|
-
"content": "
|
|
551
|
+
"content": "e0128a312c3f44af858db3bb2eae225c264472fac4c2e63e63033dfdc376aed9"
|
|
530
552
|
}
|
|
531
553
|
]
|
|
532
554
|
},
|
|
@@ -541,6 +563,17 @@
|
|
|
541
563
|
}
|
|
542
564
|
]
|
|
543
565
|
},
|
|
566
|
+
{
|
|
567
|
+
"bom-ref": "file:data/playbooks/supply-chain-recovery.json",
|
|
568
|
+
"type": "file",
|
|
569
|
+
"name": "data/playbooks/supply-chain-recovery.json",
|
|
570
|
+
"hashes": [
|
|
571
|
+
{
|
|
572
|
+
"alg": "SHA-256",
|
|
573
|
+
"content": "d0a13bab1eac5712f4dd910ab62f7c39920ee481534baa88ed6dd55134812cd0"
|
|
574
|
+
}
|
|
575
|
+
]
|
|
576
|
+
},
|
|
544
577
|
{
|
|
545
578
|
"bom-ref": "file:data/playbooks/webhook-callback-abuse.json",
|
|
546
579
|
"type": "file",
|
|
@@ -570,7 +603,7 @@
|
|
|
570
603
|
"hashes": [
|
|
571
604
|
{
|
|
572
605
|
"alg": "SHA-256",
|
|
573
|
-
"content": "
|
|
606
|
+
"content": "bb3fec080f649a5968f8d0c6d69ca4d32fb120de0f7d07b1f5058184d4d3ff3a"
|
|
574
607
|
}
|
|
575
608
|
]
|
|
576
609
|
},
|
|
@@ -746,7 +779,7 @@
|
|
|
746
779
|
"hashes": [
|
|
747
780
|
{
|
|
748
781
|
"alg": "SHA-256",
|
|
749
|
-
"content": "
|
|
782
|
+
"content": "bb1ad0a64b9e05c39d4bc3bd31615938f77510fd61a0c48b735386043a9ace22"
|
|
750
783
|
}
|
|
751
784
|
]
|
|
752
785
|
},
|
|
@@ -889,7 +922,7 @@
|
|
|
889
922
|
"hashes": [
|
|
890
923
|
{
|
|
891
924
|
"alg": "SHA-256",
|
|
892
|
-
"content": "
|
|
925
|
+
"content": "d98598a62974f8e0b01cce1120b54f5c117744b5bdb1a84d3a092556fc2f67d8"
|
|
893
926
|
}
|
|
894
927
|
]
|
|
895
928
|
},
|
|
@@ -988,7 +1021,7 @@
|
|
|
988
1021
|
"hashes": [
|
|
989
1022
|
{
|
|
990
1023
|
"alg": "SHA-256",
|
|
991
|
-
"content": "
|
|
1024
|
+
"content": "fac154a4d63a13c1289d3498abab8d28433c30b79393e63f49c6a2ce21f7922e"
|
|
992
1025
|
}
|
|
993
1026
|
]
|
|
994
1027
|
},
|
|
@@ -1032,7 +1065,7 @@
|
|
|
1032
1065
|
"hashes": [
|
|
1033
1066
|
{
|
|
1034
1067
|
"alg": "SHA-256",
|
|
1035
|
-
"content": "
|
|
1068
|
+
"content": "e6ca431c82725c29082fde73d3af13ef2b91607bfb79bcfa6741b98079e30062"
|
|
1036
1069
|
}
|
|
1037
1070
|
]
|
|
1038
1071
|
},
|