@blamejs/exceptd-skills 0.16.11 → 0.16.13

package/data/cwe-catalog.json

@@ -88,6 +88,7 @@
     "skills_referencing": [
       "api-security",
       "attack-surface-pentest",
+      "mail-server-hardening",
       "mcp-agent-trust",
       "webapp-security"
     ],
@@ -148,6 +149,7 @@
     ],
     "skills_referencing": [
       "api-security",
+      "mail-server-hardening",
       "mcp-agent-trust",
       "webapp-security"
     ],
@@ -1068,7 +1070,8 @@
     ],
     "skills_referencing": [
       "idp-incident-response",
-      "mcp-agent-trust"
+      "mcp-agent-trust",
+      "network-trust"
     ],
     "evidence_cves": [
       "CVE-2023-51764",
@@ -1834,6 +1837,7 @@
       "cloud-iam-incident",
       "identity-assurance",
       "idp-incident-response",
+      "mail-server-hardening",
       "sector-financial",
       "vc-wallet-trust",
       "webapp-security"
@@ -1901,6 +1905,7 @@
       "api-security",
       "attack-surface-pentest",
       "mcp-agent-trust",
+      "network-trust",
       "sector-telecom",
       "webapp-security"
     ],
@@ -2570,6 +2575,7 @@
     "last_verified": "2026-05-18",
     "notes": "Added v0.13.17 KEV bulk-import.",
     "skills_referencing": [
+      "network-trust",
       "vc-wallet-trust"
     ]
   },
@@ -2630,7 +2636,10 @@
       "CVE-2025-58360"
     ],
     "last_verified": "2026-05-18",
-    "notes": "Added v0.13.17 KEV bulk-import."
+    "notes": "Added v0.13.17 KEV bulk-import.",
+    "skills_referencing": [
+      "mail-server-hardening"
+    ]
   },
   "CWE-648": {
     "id": "CWE-648",
@@ -2930,6 +2939,7 @@
     "last_verified": "2026-05-18",
     "notes": "Added v0.13.17 KEV bulk-import round 2.",
     "skills_referencing": [
+      "network-trust",
       "vc-wallet-trust"
     ]
   },
@@ -3050,7 +3060,10 @@
     "last_verified": "2026-05-19",
     "notes": "Bulk-imported v0.13.18 from the canonical MITRE Top 25 + commonly-referenced-class expansion.",
     "_auto_imported": true,
-    "_intake_method": "v0.13.18-bulk-mitre-cwe-curated"
+    "_intake_method": "v0.13.18-bulk-mitre-cwe-curated",
+    "skills_referencing": [
+      "mail-server-hardening"
+    ]
   },
   "CWE-285": {
     "id": "CWE-285",
@@ -4511,7 +4524,9 @@
     "related_attack_patterns_capec": [
       "CAPEC-34"
     ],
-    "skills_referencing": [],
+    "skills_referencing": [
+      "mail-server-hardening"
+    ],
     "evidence_cves": [
       "CVE-2023-51764",
       "CVE-2023-51765",

package/data/playbooks/crypto.json

@@ -50,6 +50,7 @@
       }
     ],
     "fed_by": [
+      "network-trust",
       "post-quantum-migration"
     ]
   },
@@ -716,7 +717,11 @@
             "system_libssl_upgrade_safe == true"
           ],
           "priority": 1,
-          "for_signals": ["ml-kem-absent","ml-dsa-slh-dsa-absent","openssl-pre-3-5"],
+          "for_signals": [
+            "ml-kem-absent",
+            "ml-dsa-slh-dsa-absent",
+            "openssl-pre-3-5"
+          ],
           "compensating_controls": [
             "pin classical-only group fallback for legacy peers via per-service override"
           ],
@@ -730,7 +735,9 @@
             "ops_authorization_for_service_restart == true"
           ],
           "priority": 2,
-          "for_signals": ["tls-no-hybrid-group"],
+          "for_signals": [
+            "tls-no-hybrid-group"
+          ],
           "compensating_controls": [
             "client_compat_canary_for_each_service",
             "monitoring_for_negotiation_failures"
@@ -745,7 +752,9 @@
             "operator_authorized_for_sshd_change == true"
           ],
           "priority": 3,
-          "for_signals": ["sshd-no-pqc-kex"],
+          "for_signals": [
+            "sshd-no-pqc-kex"
+          ],
           "compensating_controls": [
             "bastion_session_recording_for_legacy_kex_fallback",
             "monitoring_for_kex_negotiation_downgrades"
@@ -759,7 +768,9 @@
             "ca_supports_hybrid_signatures == true OR internal_ca_can_be_extended == true"
           ],
           "priority": 4,
-          "for_signals": ["rsa-2048-cert-long-life"],
+          "for_signals": [
+            "rsa-2048-cert-long-life"
+          ],
           "compensating_controls": [
             "legacy_chain_for_pre-PQC_client_compat",
             "transparency_log_entries_for_hybrid_certs"
@@ -773,7 +784,9 @@
             "asset_inventory_baseline_exists == true"
           ],
           "priority": 5,
-          "for_signals": ["no-crypto-inventory"],
+          "for_signals": [
+            "no-crypto-inventory"
+          ],
           "compensating_controls": [],
           "estimated_time_hours": 40
         },

package/data/playbooks/framework.json

@@ -58,7 +58,9 @@
       "kernel",
       "library-author",
       "llm-tool-use-exfil",
+      "mail-server-hardening",
       "mcp",
+      "network-trust",
       "post-quantum-migration",
       "ransomware",
       "sbom",