@blamejs/exceptd-skills 0.16.14 → 0.16.16

package/data/_indexes/currency.json

@@ -6,7 +6,7 @@
     "decay_formula": "100 base; -30/-20/-10/-5 at 180/90/60/30-day thresholds. forward_watch count does NOT affect the score (it's a maintenance signal, not a staleness one). Label thresholds: ≥90 current, ≥70 acceptable, ≥50 stale, <50 critical_stale."
   },
   "summary": {
-    "current": 46,
+    "current": 48,
     "acceptable": 0,
     "stale": 0,
     "critical_stale": 0,
@@ -247,6 +247,15 @@
       "forward_watch_count": 6,
       "action_required": false
     },
+    {
+      "skill": "multitenancy-isolation",
+      "last_threat_review": "2026-06-02",
+      "days_since_review": -18,
+      "currency_score": 100,
+      "currency_label": "current",
+      "forward_watch_count": 0,
+      "action_required": false
+    },
     {
       "skill": "network-trust",
       "last_threat_review": "2026-06-02",
@@ -364,6 +373,15 @@
       "forward_watch_count": 4,
       "action_required": false
     },
+    {
+      "skill": "self-update-integrity",
+      "last_threat_review": "2026-06-02",
+      "days_since_review": -18,
+      "currency_score": 100,
+      "currency_label": "current",
+      "forward_watch_count": 0,
+      "action_required": false
+    },
     {
       "skill": "skill-update-loop",
       "last_threat_review": "2026-05-22",

package/data/_indexes/frequency.json

@@ -115,9 +115,10 @@
         ]
       },
       "CWE-494": {
-        "count": 2,
+        "count": 3,
         "skills": [
           "mcp-agent-trust",
+          "self-update-integrity",
           "supply-chain-integrity"
         ]
       },
@@ -249,9 +250,10 @@
         ]
       },
       "CWE-829": {
-        "count": 2,
+        "count": 3,
         "skills": [
           "sector-federal-government",
+          "self-update-integrity",
           "supply-chain-integrity"
         ]
       },
@@ -307,13 +309,14 @@
         ]
       },
       "CWE-863": {
-        "count": 8,
+        "count": 9,
         "skills": [
           "api-security",
           "cloud-iam-incident",
           "identity-assurance",
           "idp-incident-response",
           "mail-server-hardening",
+          "multitenancy-isolation",
           "sector-financial",
           "vc-wallet-trust",
           "webapp-security"
@@ -341,10 +344,11 @@
         ]
       },
       "CWE-347": {
-        "count": 3,
+        "count": 4,
         "skills": [
           "audit-log-integrity",
           "network-trust",
+          "self-update-integrity",
           "vc-wallet-trust"
         ]
       },
@@ -368,9 +372,10 @@
         ]
       },
       "CWE-400": {
-        "count": 1,
+        "count": 2,
         "skills": [
-          "mail-server-hardening"
+          "mail-server-hardening",
+          "multitenancy-isolation"
         ]
       },
       "CWE-778": {
@@ -378,6 +383,30 @@
         "skills": [
           "audit-log-integrity"
         ]
+      },
+      "CWE-353": {
+        "count": 1,
+        "skills": [
+          "self-update-integrity"
+        ]
+      },
+      "CWE-639": {
+        "count": 1,
+        "skills": [
+          "multitenancy-isolation"
+        ]
+      },
+      "CWE-770": {
+        "count": 1,
+        "skills": [
+          "multitenancy-isolation"
+        ]
+      },
+      "CWE-668": {
+        "count": 1,
+        "skills": [
+          "multitenancy-isolation"
+        ]
       }
     },
     "d3fend_refs": {
@@ -971,9 +1000,11 @@
         ]
       },
       "AU-ISM-1556": {
-        "count": 1,
+        "count": 3,
         "skills": [
-          "sector-telecom"
+          "multitenancy-isolation",
+          "sector-telecom",
+          "self-update-integrity"
         ]
       },
       "GSMA-NESAS-Deployment": {
@@ -1136,11 +1167,13 @@
         ]
       },
       "NIS2-Art21-network-security": {
-        "count": 3,
+        "count": 5,
         "skills": [
           "audit-log-integrity",
           "mail-server-hardening",
-          "network-trust"
+          "multitenancy-isolation",
+          "network-trust",
+          "self-update-integrity"
         ]
       },
       "ISO-27001-2022-A.8.21": {
@@ -1150,9 +1183,11 @@
         ]
       },
       "UK-CAF-B4": {
-        "count": 1,
+        "count": 3,
         "skills": [
-          "network-trust"
+          "multitenancy-isolation",
+          "network-trust",
+          "self-update-integrity"
         ]
       },
       "ISO-27001-2022-A.8.15": {
@@ -1160,6 +1195,18 @@
         "skills": [
           "audit-log-integrity"
         ]
+      },
+      "NIST-800-53-SR-11": {
+        "count": 1,
+        "skills": [
+          "self-update-integrity"
+        ]
+      },
+      "NIST-800-53-AC-3": {
+        "count": 1,
+        "skills": [
+          "multitenancy-isolation"
+        ]
       }
     },
     "atlas_refs": {
@@ -1358,7 +1405,7 @@
         ]
       },
       "T1078": {
-        "count": 13,
+        "count": 14,
         "skills": [
           "age-gates-child-safety",
           "api-security",
@@ -1368,6 +1415,7 @@
           "email-security-anti-phishing",
           "identity-assurance",
           "incident-response-playbook",
+          "multitenancy-isolation",
           "ransomware-response",
           "sector-energy",
           "sector-financial",
@@ -1388,10 +1436,11 @@
         ]
       },
       "T1530": {
-        "count": 3,
+        "count": 4,
         "skills": [
           "cloud-security",
           "dlp-gap-analysis",
+          "multitenancy-isolation",
           "sector-healthcare"
         ]
       },
@@ -1409,8 +1458,9 @@
         ]
       },
       "T1195.002": {
-        "count": 1,
+        "count": 2,
         "skills": [
+          "self-update-integrity",
           "supply-chain-integrity"
         ]
       },
@@ -1605,6 +1655,24 @@
         "skills": [
           "audit-log-integrity"
         ]
+      },
+      "T1574": {
+        "count": 1,
+        "skills": [
+          "self-update-integrity"
+        ]
+      },
+      "T1499": {
+        "count": 1,
+        "skills": [
+          "multitenancy-isolation"
+        ]
+      },
+      "T1499.001": {
+        "count": 1,
+        "skills": [
+          "multitenancy-isolation"
+        ]
       }
     },
     "rfc_refs": {
@@ -1816,13 +1884,14 @@
       },
       {
         "id": "CWE-863",
-        "count": 8,
+        "count": 9,
         "skills": [
           "api-security",
           "cloud-iam-incident",
           "identity-assurance",
           "idp-incident-response",
           "mail-server-hardening",
+          "multitenancy-isolation",
           "sector-financial",
           "vc-wallet-trust",
           "webapp-security"
@@ -2097,6 +2166,17 @@
           "sector-healthcare"
         ]
       },
+      {
+        "id": "NIS2-Art21-network-security",
+        "count": 5,
+        "skills": [
+          "audit-log-integrity",
+          "mail-server-hardening",
+          "multitenancy-isolation",
+          "network-trust",
+          "self-update-integrity"
+        ]
+      },
       {
         "id": "SOC2-CC7-anomaly-detection",
         "count": 5,
@@ -2147,16 +2227,6 @@
           "ot-ics-security",
           "sector-energy"
         ]
-      },
-      {
-        "id": "SLSA-v1.0-Build-L3",
-        "count": 4,
-        "skills": [
-          "container-runtime-security",
-          "mlops-security",
-          "sector-federal-government",
-          "supply-chain-integrity"
-        ]
       }
     ],
     "atlas_refs": [
@@ -2273,6 +2343,26 @@
       }
     ],
     "attack_refs": [
+      {
+        "id": "T1078",
+        "count": 14,
+        "skills": [
+          "age-gates-child-safety",
+          "api-security",
+          "attack-surface-pentest",
+          "cloud-iam-incident",
+          "cloud-security",
+          "email-security-anti-phishing",
+          "identity-assurance",
+          "incident-response-playbook",
+          "multitenancy-isolation",
+          "ransomware-response",
+          "sector-energy",
+          "sector-financial",
+          "sector-healthcare",
+          "sector-telecom"
+        ]
+      },
       {
         "id": "T1190",
         "count": 14,
@@ -2293,25 +2383,6 @@
           "webapp-security"
         ]
       },
-      {
-        "id": "T1078",
-        "count": 13,
-        "skills": [
-          "age-gates-child-safety",
-          "api-security",
-          "attack-surface-pentest",
-          "cloud-iam-incident",
-          "cloud-security",
-          "email-security-anti-phishing",
-          "identity-assurance",
-          "incident-response-playbook",
-          "ransomware-response",
-          "sector-energy",
-          "sector-financial",
-          "sector-healthcare",
-          "sector-telecom"
-        ]
-      },
       {
         "id": "T1567",
         "count": 7,
@@ -2346,6 +2417,16 @@
           "supply-chain-integrity"
         ]
       },
+      {
+        "id": "T1530",
+        "count": 4,
+        "skills": [
+          "cloud-security",
+          "dlp-gap-analysis",
+          "multitenancy-isolation",
+          "sector-healthcare"
+        ]
+      },
       {
         "id": "T1556",
         "count": 4,
@@ -2374,15 +2455,6 @@
           "sector-financial"
         ]
       },
-      {
-        "id": "T1530",
-        "count": 3,
-        "skills": [
-          "cloud-security",
-          "dlp-gap-analysis",
-          "sector-healthcare"
-        ]
-      },
       {
         "id": "T0855",
         "count": 2,
@@ -2514,8 +2586,11 @@
     "cwe_refs": [
       "CWE-20",
       "CWE-327",
-      "CWE-400",
+      "CWE-353",
       "CWE-611",
+      "CWE-639",
+      "CWE-668",
+      "CWE-770",
       "CWE-778",
       "CWE-93"
     ],
@@ -2529,7 +2604,6 @@
       "3GPP-TR-33.926",
       "ALL-MCP-TOOL-TRUST",
       "AU-ISM-1546-Cloud-Service-Account",
-      "AU-ISM-1556",
       "AU-ISM-1559-IdP",
       "AWS-Security-Hub-Coverage-Gap",
       "CISA-Snowflake-AA24-IdP-Cloud",
@@ -2551,7 +2625,9 @@
       "Insurance-Carrier-24h-Notification",
       "NIS2-Annex-I-Telecom",
       "NIST-800-53-AC-2-Cross-Account",
+      "NIST-800-53-AC-3",
       "NIST-800-53-SI-12",
+      "NIST-800-53-SR-11",
       "OFAC-SDN-Payment-Block",
       "OFAC-Sanctions-Threat-Actor-Negotiation",
       "OWASP-LLM-Top-10-2025-LLM02",
@@ -2565,7 +2641,6 @@
       "UK-CAF-B2",
       "UK-CAF-B2-Cloud-IAM",
       "UK-CAF-B2-IdP-Tenant",
-      "UK-CAF-B4",
       "UK-CAF-B5",
       "VEX-CSAF-v2.1"
     ],
@@ -2580,8 +2655,9 @@
       "T1102",
       "T1110",
       "T1133",
-      "T1195.002",
       "T1213",
+      "T1499",
+      "T1499.001",
       "T1505",
       "T1538",
       "T1548.001",
@@ -2595,6 +2671,7 @@
       "T1566.002",
       "T1566.003",
       "T1568",
+      "T1574",
       "T1580",
       "T1606",
       "T1606.002",
@@ -2677,7 +2754,6 @@
       "CWE-340",
       "CWE-346",
       "CWE-35",
-      "CWE-353",
       "CWE-367",
       "CWE-377",
       "CWE-384",
@@ -2710,14 +2786,12 @@
       "CWE-601",
       "CWE-613",
       "CWE-614",
-      "CWE-639",
       "CWE-640",
       "CWE-641",
       "CWE-642",
       "CWE-643",
       "CWE-648",
       "CWE-667",
-      "CWE-668",
       "CWE-669",
       "CWE-680",
       "CWE-693",
@@ -2729,7 +2803,6 @@
       "CWE-755",
       "CWE-759",
       "CWE-760",
-      "CWE-770",
       "CWE-772",
       "CWE-776",
       "CWE-779",
@@ -3427,7 +3500,6 @@
       "NIST-800-218-SSDF-PO.4.2",
       "NIST-800-218-SSDF-PW.4",
       "NIST-800-218-SSDF-PW.7.1",
-      "NIST-800-53-AC-3",
       "NIST-800-53-AC-6",
       "NIST-800-53-AU-9",
       "NIST-800-53-CM-3",
@@ -3440,7 +3512,6 @@
       "NIST-800-53-SC-5",
       "NIST-800-53-SI-10",
       "NIST-800-53-SI-4",
-      "NIST-800-53-SR-11",
       "NIST-800-53-SR-3",
       "NIST-AI-RMF-MAP-3.4",
       "NIST-AI-RMF-MEASURE-2.7",

package/data/_indexes/handoff-dag.json

@@ -26,6 +26,7 @@
     "mail-server-hardening",
     "mcp-agent-trust",
     "mlops-security",
+    "multitenancy-isolation",
     "network-trust",
     "ot-ics-security",
     "policy-exception-gen",
@@ -39,6 +40,7 @@
     "sector-healthcare",
     "sector-telecom",
     "security-maturity-tiers",
+    "self-update-integrity",
     "skill-update-loop",
     "supply-chain-integrity",
     "threat-model-currency",
@@ -521,7 +523,9 @@
     "vc-wallet-trust": [],
     "mail-server-hardening": [],
     "network-trust": [],
-    "audit-log-integrity": []
+    "audit-log-integrity": [],
+    "self-update-integrity": [],
+    "multitenancy-isolation": []
   },
   "in_degree": {
     "age-gates-child-safety": 1,
@@ -550,6 +554,7 @@
     "mail-server-hardening": 0,
     "mcp-agent-trust": 22,
     "mlops-security": 6,
+    "multitenancy-isolation": 0,
     "network-trust": 0,
     "ot-ics-security": 4,
     "policy-exception-gen": 16,
@@ -563,6 +568,7 @@
     "sector-healthcare": 6,
     "sector-telecom": 2,
     "security-maturity-tiers": 1,
+    "self-update-integrity": 0,
     "skill-update-loop": 3,
     "supply-chain-integrity": 17,
     "threat-model-currency": 6,
@@ -598,6 +604,7 @@
     "mail-server-hardening": 0,
     "mcp-agent-trust": 7,
     "mlops-security": 10,
+    "multitenancy-isolation": 0,
     "network-trust": 0,
     "ot-ics-security": 14,
     "policy-exception-gen": 0,
@@ -611,6 +618,7 @@
     "sector-healthcare": 13,
     "sector-telecom": 0,
     "security-maturity-tiers": 3,
+    "self-update-integrity": 0,
     "skill-update-loop": 21,
     "supply-chain-integrity": 4,
     "threat-model-currency": 5,

package/data/_indexes/jurisdiction-map.json

@@ -27,6 +27,7 @@
       "mail-server-hardening",
       "mcp-agent-trust",
       "mlops-security",
+      "multitenancy-isolation",
       "network-trust",
       "ot-ics-security",
       "policy-exception-gen",
@@ -40,6 +41,7 @@
       "sector-healthcare",
       "sector-telecom",
       "security-maturity-tiers",
+      "self-update-integrity",
       "skill-update-loop",
       "supply-chain-integrity",
       "threat-model-currency",
@@ -49,7 +51,7 @@
       "zeroday-gap-learn"
     ],
     "example_excerpts": {},
-    "skill_count": 46
+    "skill_count": 48
   },
   "UK": {
     "skills": [
@@ -77,6 +79,7 @@
       "kernel-lpe-triage",
       "mcp-agent-trust",
       "mlops-security",
+      "multitenancy-isolation",
       "network-trust",
       "ot-ics-security",
       "policy-exception-gen",
@@ -90,6 +93,7 @@
       "sector-healthcare",
       "sector-telecom",
       "security-maturity-tiers",
+      "self-update-integrity",
       "skill-update-loop",
       "supply-chain-integrity",
       "threat-model-currency",
@@ -99,7 +103,7 @@
       "zeroday-gap-learn"
     ],
     "example_excerpts": {},
-    "skill_count": 44
+    "skill_count": 46
   },
   "AU": {
     "skills": [
@@ -127,6 +131,7 @@
       "kernel-lpe-triage",
       "mcp-agent-trust",
       "mlops-security",
+      "multitenancy-isolation",
       "ot-ics-security",
       "policy-exception-gen",
       "pqc-first",
@@ -139,6 +144,7 @@
       "sector-healthcare",
       "sector-telecom",
       "security-maturity-tiers",
+      "self-update-integrity",
       "skill-update-loop",
       "supply-chain-integrity",
       "threat-model-currency",
@@ -147,7 +153,7 @@
       "zeroday-gap-learn"
     ],
     "example_excerpts": {},
-    "skill_count": 42
+    "skill_count": 44
   },
   "SG": {
     "skills": [
@@ -247,11 +253,12 @@
       "sector-financial",
       "sector-healthcare",
       "sector-telecom",
+      "self-update-integrity",
       "skill-update-loop",
       "zeroday-gap-learn"
     ],
     "example_excerpts": {},
-    "skill_count": 18
+    "skill_count": 19
   },
   "BR": {
     "skills": [