@blamejs/exceptd-skills 0.16.14 → 0.16.16

package/data/cwe-catalog.json

@@ -1141,7 +1141,9 @@
       "CAPEC-75",
       "CAPEC-39"
     ],
-    "skills_referencing": [],
+    "skills_referencing": [
+      "self-update-integrity"
+    ],
     "evidence_cves": [
       "CVE-2026-32202"
     ],
@@ -1324,6 +1326,7 @@
     ],
     "skills_referencing": [
       "mcp-agent-trust",
+      "self-update-integrity",
       "supply-chain-integrity"
     ],
     "evidence_cves": [
@@ -1754,6 +1757,7 @@
     ],
     "skills_referencing": [
       "sector-federal-government",
+      "self-update-integrity",
       "supply-chain-integrity"
     ],
     "evidence_cves": [
@@ -1840,6 +1844,7 @@
       "identity-assurance",
       "idp-incident-response",
       "mail-server-hardening",
+      "multitenancy-isolation",
       "sector-financial",
       "vc-wallet-trust",
       "webapp-security"
@@ -2579,6 +2584,7 @@
     "skills_referencing": [
       "audit-log-integrity",
       "network-trust",
+      "self-update-integrity",
       "vc-wallet-trust"
     ]
   },
@@ -3065,7 +3071,8 @@
     "_auto_imported": true,
     "_intake_method": "v0.13.18-bulk-mitre-cwe-curated",
     "skills_referencing": [
-      "mail-server-hardening"
+      "mail-server-hardening",
+      "multitenancy-isolation"
     ]
   },
   "CWE-285": {
@@ -3572,7 +3579,10 @@
     "last_verified": "2026-05-19",
     "notes": "Bulk-imported v0.13.18 from the canonical MITRE Top 25 + commonly-referenced-class expansion.",
     "_auto_imported": true,
-    "_intake_method": "v0.13.18-bulk-mitre-cwe-curated"
+    "_intake_method": "v0.13.18-bulk-mitre-cwe-curated",
+    "skills_referencing": [
+      "multitenancy-isolation"
+    ]
   },
   "CWE-640": {
     "id": "CWE-640",
@@ -3768,7 +3778,10 @@
     "last_verified": "2026-05-19",
     "notes": "Bulk-imported v0.13.18 from the canonical MITRE Top 25 + commonly-referenced-class expansion.",
     "_auto_imported": true,
-    "_intake_method": "v0.13.18-bulk-mitre-cwe-curated"
+    "_intake_method": "v0.13.18-bulk-mitre-cwe-curated",
+    "skills_referencing": [
+      "multitenancy-isolation"
+    ]
   },
   "CWE-772": {
     "id": "CWE-772",
@@ -4457,7 +4470,10 @@
       "CVE-2024-21626"
     ],
     "last_verified": "2026-05-19",
-    "notes": "Added v0.13.19 to back the runc /proc/self/fd container-escape (CVE-2024-21626) cwe_refs entry."
+    "notes": "Added v0.13.19 to back the runc /proc/self/fd container-escape (CVE-2024-21626) cwe_refs entry.",
+    "skills_referencing": [
+      "multitenancy-isolation"
+    ]
   },
   "CWE-340": {
     "id": "CWE-340",

package/data/playbooks/cloud-iam-incident.json

@@ -60,7 +60,8 @@
       }
     ],
     "fed_by": [
-      "identity-sso-compromise"
+      "identity-sso-compromise",
+      "multitenancy-isolation"
     ]
   },
   "domain": {
@@ -976,7 +977,15 @@
             "rotation_ownership_identified == true"
           ],
           "priority": 1,
-          "for_signals": ["root_login_from_new_asn","iam_access_key_created_no_iac_ticket","mass_iam_user_creation_outside_iac","cross_account_assume_role_anomaly","kms_key_policy_self_grant","s3_bucket_policy_public_grant","cloudtrail_logging_disabled_event"],
+          "for_signals": [
+            "root_login_from_new_asn",
+            "iam_access_key_created_no_iac_ticket",
+            "mass_iam_user_creation_outside_iac",
+            "cross_account_assume_role_anomaly",
+            "kms_key_policy_self_grant",
+            "s3_bucket_policy_public_grant",
+            "cloudtrail_logging_disabled_event"
+          ],
           "compensating_controls": [
             "session-revocation",
             "audit-log-review-for-misuse-window",
@@ -992,7 +1001,15 @@
             "iam_read_only_across_org == true"
           ],
           "priority": 2,
-          "for_signals": ["cross_account_assume_role_anomaly","mass_iam_user_creation_outside_iac","iam_access_key_created_no_iac_ticket","kms_key_policy_self_grant","s3_bucket_policy_public_grant","gpu_instance_creation_spike","unused_region_resource_creation"],
+          "for_signals": [
+            "cross_account_assume_role_anomaly",
+            "mass_iam_user_creation_outside_iac",
+            "iam_access_key_created_no_iac_ticket",
+            "kms_key_policy_self_grant",
+            "s3_bucket_policy_public_grant",
+            "gpu_instance_creation_spike",
+            "unused_region_resource_creation"
+          ],
           "compensating_controls": [
             "iam-event-review-completed",
             "scp-tightened",
@@ -1007,7 +1024,9 @@
             "imdsv2_migration_blocker_inventory_complete == true"
           ],
           "priority": 2,
-          "for_signals": ["imds_v1_legacy_access"],
+          "for_signals": [
+            "imds_v1_legacy_access"
+          ],
           "compensating_controls": [
             "imdsv2-enforced-org-wide",
             "scp-deny-imdsv1-launch"
@@ -1021,7 +1040,9 @@
             "federated_trust_inventory_complete == true"
           ],
           "priority": 2,
-          "for_signals": ["cross_account_assume_role_anomaly"],
+          "for_signals": [
+            "cross_account_assume_role_anomaly"
+          ],
           "compensating_controls": [
             "federated-trust-tightened",
             "conditional-access-mfa-required-on-admin"

package/data/playbooks/framework.json

@@ -61,10 +61,12 @@
       "llm-tool-use-exfil",
       "mail-server-hardening",
       "mcp",
+      "multitenancy-isolation",
       "network-trust",
       "post-quantum-migration",
       "ransomware",
       "sbom",
+      "self-update-integrity",
       "supply-chain-recovery",
       "vc-wallet-trust",
       "webhook-callback-abuse"