@blamejs/exceptd-skills 0.16.24 → 0.16.28

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (66) hide show
  1. package/AGENTS.md +5 -5
  2. package/ARCHITECTURE.md +3 -3
  3. package/CHANGELOG.md +18 -0
  4. package/CONTEXT.md +2 -2
  5. package/README.md +5 -5
  6. package/agents/threat-researcher.md +2 -2
  7. package/data/_indexes/_meta.json +39 -39
  8. package/data/_indexes/activity-feed.json +240 -240
  9. package/data/_indexes/catalog-summaries.json +3 -3
  10. package/data/_indexes/currency.json +64 -64
  11. package/data/_indexes/recipes.json +1 -1
  12. package/data/_indexes/section-offsets.json +510 -510
  13. package/data/_indexes/summary-cards.json +33 -33
  14. package/data/_indexes/token-budget.json +200 -200
  15. package/data/atlas-ttps.json +7 -7
  16. package/data/attack-techniques.json +5 -5
  17. package/data/framework-control-gaps.json +3 -3
  18. package/lib/auto-discovery.js +7 -9
  19. package/lib/cvss.js +108 -0
  20. package/lib/prefetch.js +97 -5
  21. package/lib/refresh-external.js +62 -26
  22. package/lib/schemas/manifest.schema.json +1 -1
  23. package/lib/schemas/skill-frontmatter.schema.json +1 -1
  24. package/lib/version-pins.js +3 -3
  25. package/manifest-snapshot.json +2 -2
  26. package/manifest-snapshot.sha256 +1 -1
  27. package/manifest.json +124 -124
  28. package/package.json +1 -1
  29. package/sbom.cdx.json +133 -118
  30. package/scripts/builders/catalog-summaries.js +1 -1
  31. package/scripts/builders/recipes.js +1 -1
  32. package/scripts/run-e2e-scenarios.js +48 -17
  33. package/skills/age-gates-child-safety/skill.md +3 -3
  34. package/skills/ai-attack-surface/skill.md +4 -4
  35. package/skills/ai-c2-detection/skill.md +5 -5
  36. package/skills/api-security/skill.md +2 -2
  37. package/skills/attack-surface-pentest/skill.md +4 -4
  38. package/skills/cloud-security/skill.md +3 -3
  39. package/skills/compliance-theater/skill.md +3 -3
  40. package/skills/container-runtime-security/skill.md +3 -3
  41. package/skills/coordinated-vuln-disclosure/skill.md +2 -2
  42. package/skills/defensive-countermeasure-mapping/skill.md +3 -3
  43. package/skills/dlp-gap-analysis/skill.md +5 -5
  44. package/skills/exploit-scoring/skill.md +2 -2
  45. package/skills/framework-gap-analysis/skill.md +4 -4
  46. package/skills/fuzz-testing-strategy/skill.md +2 -2
  47. package/skills/incident-response-playbook/skill.md +3 -3
  48. package/skills/mcp-agent-trust/skill.md +2 -2
  49. package/skills/mlops-security/skill.md +3 -3
  50. package/skills/ot-ics-security/skill.md +3 -3
  51. package/skills/policy-exception-gen/skill.md +3 -3
  52. package/skills/pqc-first/skill.md +2 -2
  53. package/skills/rag-pipeline-security/skill.md +4 -4
  54. package/skills/ransomware-response/skill.md +2 -2
  55. package/skills/sector-energy/skill.md +2 -2
  56. package/skills/sector-federal-government/skill.md +2 -2
  57. package/skills/sector-financial/skill.md +4 -4
  58. package/skills/sector-healthcare/skill.md +3 -3
  59. package/skills/security-maturity-tiers/skill.md +1 -1
  60. package/skills/skill-update-loop/skill.md +6 -6
  61. package/skills/supply-chain-integrity/skill.md +2 -2
  62. package/skills/threat-model-currency/skill.md +8 -8
  63. package/skills/threat-modeling-methodology/skill.md +2 -2
  64. package/skills/webapp-security/skill.md +2 -2
  65. package/skills/zeroday-gap-learn/skill.md +3 -3
  66. package/sources/validators/cve-validator.js +12 -13
package/package.json CHANGED
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "@blamejs/exceptd-skills",
3
- "version": "0.16.24",
3
+ "version": "0.16.28",
4
4
  "description": "AI security skills grounded in mid-2026 threat reality, not stale framework documentation. 51 skills, 11 catalogs (439 CVEs / 177 CWEs / 805 ATT&CK + ICS / 170 ATLAS / 468 D3FEND / 8888 RFCs), 35 jurisdictions, 10-class catalog gap detector + budget gate, real XML parser + canonical-form diff + content-pattern regression detection, Ed25519-signed.",
5
5
  "keywords": [
6
6
  "ai-security",