@blamejs/exceptd-skills 0.16.11 → 0.16.12

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (27) hide show
  1. package/AGENTS.md +2 -1
  2. package/CHANGELOG.md +4 -0
  3. package/README.md +5 -5
  4. package/bin/exceptd.js +2 -1
  5. package/data/_indexes/_meta.json +16 -15
  6. package/data/_indexes/activity-feed.json +9 -2
  7. package/data/_indexes/chains.json +18183 -2013
  8. package/data/_indexes/currency.json +10 -1
  9. package/data/_indexes/frequency.json +94 -49
  10. package/data/_indexes/handoff-dag.json +5 -1
  11. package/data/_indexes/jurisdiction-map.json +4 -2
  12. package/data/_indexes/section-offsets.json +85 -0
  13. package/data/_indexes/stale-content.json +1 -1
  14. package/data/_indexes/summary-cards.json +40 -0
  15. package/data/_indexes/token-budget.json +53 -3
  16. package/data/_indexes/trigger-table.json +54 -0
  17. package/data/_indexes/xref.json +28 -3
  18. package/data/cwe-catalog.json +14 -3
  19. package/data/playbooks/framework.json +1 -0
  20. package/data/playbooks/mail-server-hardening.json +700 -0
  21. package/data/playbooks/secrets.json +19 -3
  22. package/manifest-snapshot.json +57 -2
  23. package/manifest-snapshot.sha256 +1 -1
  24. package/manifest.json +104 -45
  25. package/package.json +2 -2
  26. package/sbom.cdx.json +60 -30
  27. package/skills/mail-server-hardening/skill.md +84 -0
package/data/_indexes/xref.json CHANGED
@@ -42,6 +42,7 @@
42
42
  "CWE-22": [
43
43
  "api-security",
44
44
  "attack-surface-pentest",
45
+ "mail-server-hardening",
45
46
  "mcp-agent-trust",
46
47
  "webapp-security"
47
48
  ],
@@ -67,6 +68,7 @@
67
68
  ],
68
69
  "CWE-77": [
69
70
  "api-security",
71
+ "mail-server-hardening",
70
72
  "mcp-agent-trust",
71
73
  "webapp-security"
72
74
  ],
@@ -196,6 +198,7 @@
196
198
  "cloud-iam-incident",
197
199
  "identity-assurance",
198
200
  "idp-incident-response",
201
+ "mail-server-hardening",
199
202
  "sector-financial",
200
203
  "vc-wallet-trust",
201
204
  "webapp-security"
@@ -216,6 +219,15 @@
216
219
  ],
217
220
  "CWE-290": [
218
221
  "vc-wallet-trust"
222
+ ],
223
+ "CWE-93": [
224
+ "mail-server-hardening"
225
+ ],
226
+ "CWE-611": [
227
+ "mail-server-hardening"
228
+ ],
229
+ "CWE-400": [
230
+ "mail-server-hardening"
219
231
  ]
220
232
  },
221
233
  "d3fend_refs": {
@@ -338,14 +350,17 @@
338
350
  },
339
351
  "framework_gaps": {
340
352
  "NIST-800-53-SI-2": [
341
- "kernel-lpe-triage"
353
+ "kernel-lpe-triage",
354
+ "mail-server-hardening"
342
355
  ],
343
356
  "ISO-27001-2022-A.8.8": [
344
357
  "coordinated-vuln-disclosure",
345
- "kernel-lpe-triage"
358
+ "kernel-lpe-triage",
359
+ "mail-server-hardening"
346
360
  ],
347
361
  "PCI-DSS-4.0-6.3.3": [
348
- "kernel-lpe-triage"
362
+ "kernel-lpe-triage",
363
+ "mail-server-hardening"
349
364
  ],
350
365
  "NIS2-Art21-patch-management": [
351
366
  "attack-surface-pentest",
@@ -660,6 +675,9 @@
660
675
  ],
661
676
  "UK-CAF-B2": [
662
677
  "vc-wallet-trust"
678
+ ],
679
+ "NIS2-Art21-network-security": [
680
+ "mail-server-hardening"
663
681
  ]
664
682
  },
665
683
  "atlas_refs": {
@@ -762,6 +780,7 @@
762
780
  "cloud-security",
763
781
  "container-runtime-security",
764
782
  "fuzz-testing-strategy",
783
+ "mail-server-hardening",
765
784
  "mcp-agent-trust",
766
785
  "ot-ics-security",
767
786
  "sector-energy",
@@ -913,6 +932,12 @@
913
932
  ],
914
933
  "T1550": [
915
934
  "vc-wallet-trust"
935
+ ],
936
+ "T1071.003": [
937
+ "mail-server-hardening"
938
+ ],
939
+ "T1557": [
940
+ "mail-server-hardening"
916
941
  ]
917
942
  },
918
943
  "rfc_refs": {
package/data/cwe-catalog.json CHANGED
@@ -88,6 +88,7 @@
88
88
  "skills_referencing": [
89
89
  "api-security",
90
90
  "attack-surface-pentest",
91
+ "mail-server-hardening",
91
92
  "mcp-agent-trust",
92
93
  "webapp-security"
93
94
  ],
@@ -148,6 +149,7 @@
148
149
  ],
149
150
  "skills_referencing": [
150
151
  "api-security",
152
+ "mail-server-hardening",
151
153
  "mcp-agent-trust",
152
154
  "webapp-security"
153
155
  ],
@@ -1834,6 +1836,7 @@
1834
1836
  "cloud-iam-incident",
1835
1837
  "identity-assurance",
1836
1838
  "idp-incident-response",
1839
+ "mail-server-hardening",
1837
1840
  "sector-financial",
1838
1841
  "vc-wallet-trust",
1839
1842
  "webapp-security"
@@ -2630,7 +2633,10 @@
2630
2633
  "CVE-2025-58360"
2631
2634
  ],
2632
2635
  "last_verified": "2026-05-18",
2633
- "notes": "Added v0.13.17 KEV bulk-import."
2636
+ "notes": "Added v0.13.17 KEV bulk-import.",
2637
+ "skills_referencing": [
2638
+ "mail-server-hardening"
2639
+ ]
2634
2640
  },
2635
2641
  "CWE-648": {
2636
2642
  "id": "CWE-648",
@@ -3050,7 +3056,10 @@
3050
3056
  "last_verified": "2026-05-19",
3051
3057
  "notes": "Bulk-imported v0.13.18 from the canonical MITRE Top 25 + commonly-referenced-class expansion.",
3052
3058
  "_auto_imported": true,
3053
- "_intake_method": "v0.13.18-bulk-mitre-cwe-curated"
3059
+ "_intake_method": "v0.13.18-bulk-mitre-cwe-curated",
3060
+ "skills_referencing": [
3061
+ "mail-server-hardening"
3062
+ ]
3054
3063
  },
3055
3064
  "CWE-285": {
3056
3065
  "id": "CWE-285",
@@ -4511,7 +4520,9 @@
4511
4520
  "related_attack_patterns_capec": [
4512
4521
  "CAPEC-34"
4513
4522
  ],
4514
- "skills_referencing": [],
4523
+ "skills_referencing": [
4524
+ "mail-server-hardening"
4525
+ ],
4515
4526
  "evidence_cves": [
4516
4527
  "CVE-2023-51764",
4517
4528
  "CVE-2023-51765",
package/data/playbooks/framework.json CHANGED
@@ -58,6 +58,7 @@
58
58
  "kernel",
59
59
  "library-author",
60
60
  "llm-tool-use-exfil",
61
+ "mail-server-hardening",
61
62
  "mcp",
62
63
  "post-quantum-migration",
63
64
  "ransomware",