@blamejs/exceptd-skills 0.16.17 → 0.16.19

package/data/cwe-catalog.json

@@ -535,6 +535,7 @@
       "api-security",
       "cloud-security",
       "dlp-gap-analysis",
+      "log-injection-telemetry",
       "sector-healthcare",
       "vc-wallet-trust",
       "webapp-security"
@@ -1074,7 +1075,8 @@
       "audit-log-integrity",
       "idp-incident-response",
       "mcp-agent-trust",
-      "network-trust"
+      "network-trust",
+      "privacy-consent-ops"
     ],
     "evidence_cves": [
       "CVE-2023-51764",
@@ -1538,6 +1540,7 @@
     "related_attack_patterns_capec": [],
     "skills_referencing": [
       "kernel-lpe-triage",
+      "privacy-consent-ops",
       "vc-wallet-trust"
     ],
     "evidence_cves": [
@@ -1912,6 +1915,7 @@
     "skills_referencing": [
       "api-security",
       "attack-surface-pentest",
+      "log-injection-telemetry",
       "mcp-agent-trust",
       "network-trust",
       "sector-telecom",
@@ -2708,7 +2712,10 @@
       "CVE-2026-21514"
     ],
     "last_verified": "2026-05-18",
-    "notes": "Added v0.13.17 KEV bulk-import."
+    "notes": "Added v0.13.17 KEV bulk-import.",
+    "skills_referencing": [
+      "privacy-consent-ops"
+    ]
   },
   "CWE-822": {
     "id": "CWE-822",
@@ -3388,7 +3395,10 @@
     "last_verified": "2026-05-19",
     "notes": "Bulk-imported v0.13.18 from the canonical MITRE Top 25 + commonly-referenced-class expansion.",
     "_auto_imported": true,
-    "_intake_method": "v0.13.18-bulk-mitre-cwe-curated"
+    "_intake_method": "v0.13.18-bulk-mitre-cwe-curated",
+    "skills_referencing": [
+      "log-injection-telemetry"
+    ]
   },
   "CWE-539": {
     "id": "CWE-539",
@@ -3846,7 +3856,8 @@
     "_auto_imported": true,
     "_intake_method": "v0.13.18-bulk-mitre-cwe-curated",
     "skills_referencing": [
-      "audit-log-integrity"
+      "audit-log-integrity",
+      "privacy-consent-ops"
     ]
   },
   "CWE-779": {
@@ -4601,5 +4612,25 @@
       "decompression-dos"
     ],
     "evidence_cves": []
+  },
+  "CWE-117": {
+    "id": "CWE-117",
+    "name": "Improper Output Neutralization for Logs",
+    "abstraction": "Base",
+    "category": "Injection",
+    "description": "The product does not neutralize or incorrectly neutralizes output that is written to logs. MITRE-canonical; full text at https://cwe.mitre.org/data/definitions/117.html. Backs the CRLF log-injection / log-forging class on telemetry sinks (forged or split log entries via un-sanitized control characters).",
+    "top_25_rank_2024": null,
+    "top_25_rank_2025": null,
+    "view_memberships": [
+      "CWE-1000"
+    ],
+    "related_attack_patterns_capec": [
+      "CAPEC-93",
+      "CAPEC-268"
+    ],
+    "skills_referencing": [
+      "log-injection-telemetry"
+    ],
+    "evidence_cves": []
   }
 }

package/data/playbooks/audit-log-integrity.json

@@ -32,6 +32,9 @@
         "playbook_id": "framework",
         "condition": "analyze.compliance_theater_check.verdict == 'theater'"
       }
+    ],
+    "fed_by": [
+      "log-injection-telemetry"
     ]
   },
   "domain": {

package/data/playbooks/framework.json

@@ -60,11 +60,13 @@
       "kernel",
       "library-author",
       "llm-tool-use-exfil",
+      "log-injection-telemetry",
       "mail-server-hardening",
       "mcp",
       "multitenancy-isolation",
       "network-trust",
       "post-quantum-migration",
+      "privacy-consent-ops",
       "ransomware",
       "sbom",
       "self-update-integrity",