npm - @blamejs/exceptd-skills - Versions diffs - 0.16.25 → 0.16.28 - Mend

@blamejs/exceptd-skills 0.16.25 → 0.16.28

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (66) hide show

package/AGENTS.md +5 -5
package/ARCHITECTURE.md +3 -3
package/CHANGELOG.md +14 -0
package/CONTEXT.md +2 -2
package/README.md +5 -5
package/agents/threat-researcher.md +2 -2
package/data/_indexes/_meta.json +39 -39
package/data/_indexes/activity-feed.json +240 -240
package/data/_indexes/catalog-summaries.json +3 -3
package/data/_indexes/currency.json +64 -64
package/data/_indexes/recipes.json +1 -1
package/data/_indexes/section-offsets.json +510 -510
package/data/_indexes/summary-cards.json +33 -33
package/data/_indexes/token-budget.json +200 -200
package/data/atlas-ttps.json +7 -7
package/data/attack-techniques.json +5 -5
package/data/framework-control-gaps.json +3 -3
package/lib/auto-discovery.js +7 -9
package/lib/cvss.js +108 -0
package/lib/prefetch.js +97 -5
package/lib/refresh-external.js +22 -11
package/lib/schemas/manifest.schema.json +1 -1
package/lib/schemas/skill-frontmatter.schema.json +1 -1
package/lib/version-pins.js +3 -3
package/manifest-snapshot.json +2 -2
package/manifest-snapshot.sha256 +1 -1
package/manifest.json +124 -124
package/package.json +1 -1
package/sbom.cdx.json +133 -118
package/scripts/builders/catalog-summaries.js +1 -1
package/scripts/builders/recipes.js +1 -1
package/scripts/run-e2e-scenarios.js +48 -17
package/skills/age-gates-child-safety/skill.md +3 -3
package/skills/ai-attack-surface/skill.md +4 -4
package/skills/ai-c2-detection/skill.md +5 -5
package/skills/api-security/skill.md +2 -2
package/skills/attack-surface-pentest/skill.md +4 -4
package/skills/cloud-security/skill.md +3 -3
package/skills/compliance-theater/skill.md +3 -3
package/skills/container-runtime-security/skill.md +3 -3
package/skills/coordinated-vuln-disclosure/skill.md +2 -2
package/skills/defensive-countermeasure-mapping/skill.md +3 -3
package/skills/dlp-gap-analysis/skill.md +5 -5
package/skills/exploit-scoring/skill.md +2 -2
package/skills/framework-gap-analysis/skill.md +4 -4
package/skills/fuzz-testing-strategy/skill.md +2 -2
package/skills/incident-response-playbook/skill.md +3 -3
package/skills/mcp-agent-trust/skill.md +2 -2
package/skills/mlops-security/skill.md +3 -3
package/skills/ot-ics-security/skill.md +3 -3
package/skills/policy-exception-gen/skill.md +3 -3
package/skills/pqc-first/skill.md +2 -2
package/skills/rag-pipeline-security/skill.md +4 -4
package/skills/ransomware-response/skill.md +2 -2
package/skills/sector-energy/skill.md +2 -2
package/skills/sector-federal-government/skill.md +2 -2
package/skills/sector-financial/skill.md +4 -4
package/skills/sector-healthcare/skill.md +3 -3
package/skills/security-maturity-tiers/skill.md +1 -1
package/skills/skill-update-loop/skill.md +6 -6
package/skills/supply-chain-integrity/skill.md +2 -2
package/skills/threat-model-currency/skill.md +8 -8
package/skills/threat-modeling-methodology/skill.md +2 -2
package/skills/webapp-security/skill.md +2 -2
package/skills/zeroday-gap-learn/skill.md +3 -3
package/sources/validators/cve-validator.js +12 -13

package/data/_indexes/summary-cards.json CHANGED Viewed

@@ -64,7 +64,7 @@
       ]
     },
     "ai-attack-surface": {
-      "description": "Comprehensive AI/ML attack surface assessment mapped to MITRE ATLAS v5.6.0 with explicit framework gap flags",
+      "description": "Comprehensive AI/ML attack surface assessment mapped to MITRE ATLAS v2026.05 with explicit framework gap flags",
       "threat_context_excerpt": "The AI attack surface is not speculative. It is actively exploited. The following are confirmed, documented threats as of mid-2026.",
       "produces": "The assessment produces a structured AI Attack Surface Assessment report. The shape below is consumed downstream by `mcp-agent-trust` (which converts the MCP Trust Assessment section into per-server policy), by `rag-pipeline-security` (which picks up any RAG-pipeline entries from the Surface Inventory), and by `incident-response-playbook` (which scopes IR against the prompt-injection and AI-C2 exposure bands). CSAF-style auditor evidence bundles consume the Framework Gaps and ATLAS TTP Coverage Gaps sections verbatim — preserve the framework-control IDs as cited.\n\n```\n## AI Attack Surface Asse ...",
       "key_xrefs": {
@@ -119,7 +119,7 @@
       "cwe_count": 3,
       "d3fend_count": 5,
       "rfc_count": 0,
-      "last_threat_review": "2026-05-17",
+      "last_threat_review": "2026-06-10",
       "path": "skills/ai-attack-surface/skill.md",
       "handoff_targets": []
     },
@@ -186,7 +186,7 @@
       "cwe_count": 8,
       "d3fend_count": 6,
       "rfc_count": 7,
-      "last_threat_review": "2026-05-17",
+      "last_threat_review": "2026-06-10",
       "path": "skills/mcp-agent-trust/skill.md",
       "handoff_targets": [
         "attack-surface-pentest",
@@ -216,7 +216,7 @@
       "cwe_count": 0,
       "d3fend_count": 0,
       "rfc_count": 0,
-      "last_threat_review": "2026-05-22",
+      "last_threat_review": "2026-06-10",
       "path": "skills/framework-gap-analysis/skill.md",
       "handoff_targets": []
     },
@@ -245,7 +245,7 @@
       "cwe_count": 0,
       "d3fend_count": 0,
       "rfc_count": 0,
-      "last_threat_review": "2026-05-22",
+      "last_threat_review": "2026-06-10",
       "path": "skills/compliance-theater/skill.md",
       "handoff_targets": []
     },
@@ -272,7 +272,7 @@
       "cwe_count": 0,
       "d3fend_count": 0,
       "rfc_count": 0,
-      "last_threat_review": "2026-05-18",
+      "last_threat_review": "2026-06-10",
       "path": "skills/exploit-scoring/skill.md",
       "handoff_targets": []
     },
@@ -320,7 +320,7 @@
       "cwe_count": 2,
       "d3fend_count": 5,
       "rfc_count": 0,
-      "last_threat_review": "2026-05-22",
+      "last_threat_review": "2026-06-10",
       "path": "skills/rag-pipeline-security/skill.md",
       "handoff_targets": [
         "ai-attack-surface",
@@ -382,7 +382,7 @@
       "cwe_count": 1,
       "d3fend_count": 7,
       "rfc_count": 6,
-      "last_threat_review": "2026-05-17",
+      "last_threat_review": "2026-06-10",
       "path": "skills/ai-c2-detection/skill.md",
       "handoff_targets": [
         "attack-surface-pentest",
@@ -414,7 +414,7 @@
       "cwe_count": 1,
       "d3fend_count": 0,
       "rfc_count": 0,
-      "last_threat_review": "2026-05-22",
+      "last_threat_review": "2026-06-10",
       "path": "skills/policy-exception-gen/skill.md",
       "handoff_targets": []
     },
@@ -438,7 +438,7 @@
       "cwe_count": 0,
       "d3fend_count": 0,
       "rfc_count": 0,
-      "last_threat_review": "2026-05-18",
+      "last_threat_review": "2026-06-10",
       "path": "skills/threat-model-currency/skill.md",
       "handoff_targets": []
     },
@@ -486,7 +486,7 @@
       "cwe_count": 0,
       "d3fend_count": 0,
       "rfc_count": 0,
-      "last_threat_review": "2026-05-18",
+      "last_threat_review": "2026-06-10",
       "path": "skills/zeroday-gap-learn/skill.md",
       "handoff_targets": []
     },
@@ -527,7 +527,7 @@
       "cwe_count": 1,
       "d3fend_count": 2,
       "rfc_count": 8,
-      "last_threat_review": "2026-05-22",
+      "last_threat_review": "2026-06-10",
       "path": "skills/pqc-first/skill.md",
       "handoff_targets": []
     },
@@ -551,7 +551,7 @@
       "cwe_count": 0,
       "d3fend_count": 0,
       "rfc_count": 0,
-      "last_threat_review": "2026-05-22",
+      "last_threat_review": "2026-06-10",
       "path": "skills/skill-update-loop/skill.md",
       "handoff_targets": []
     },
@@ -658,7 +658,7 @@
       "cwe_count": 11,
       "d3fend_count": 3,
       "rfc_count": 0,
-      "last_threat_review": "2026-05-11",
+      "last_threat_review": "2026-06-10",
       "path": "skills/attack-surface-pentest/skill.md",
       "handoff_targets": []
     },
@@ -701,7 +701,7 @@
       "cwe_count": 6,
       "d3fend_count": 3,
       "rfc_count": 0,
-      "last_threat_review": "2026-05-11",
+      "last_threat_review": "2026-06-10",
       "path": "skills/fuzz-testing-strategy/skill.md",
       "handoff_targets": []
     },
@@ -756,7 +756,7 @@
       "cwe_count": 2,
       "d3fend_count": 5,
       "rfc_count": 2,
-      "last_threat_review": "2026-05-15",
+      "last_threat_review": "2026-06-10",
       "path": "skills/dlp-gap-analysis/skill.md",
       "handoff_targets": []
     },
@@ -813,7 +813,7 @@
       "cwe_count": 5,
       "d3fend_count": 3,
       "rfc_count": 1,
-      "last_threat_review": "2026-05-15",
+      "last_threat_review": "2026-06-10",
       "path": "skills/supply-chain-integrity/skill.md",
       "handoff_targets": []
     },
@@ -858,7 +858,7 @@
       "cwe_count": 0,
       "d3fend_count": 20,
       "rfc_count": 0,
-      "last_threat_review": "2026-05-11",
+      "last_threat_review": "2026-06-10",
       "path": "skills/defensive-countermeasure-mapping/skill.md",
       "handoff_targets": []
     },
@@ -964,7 +964,7 @@
       "cwe_count": 4,
       "d3fend_count": 0,
       "rfc_count": 0,
-      "last_threat_review": "2026-05-11",
+      "last_threat_review": "2026-06-10",
       "path": "skills/ot-ics-security/skill.md",
       "handoff_targets": [
         "ai-attack-surface",
@@ -1014,7 +1014,7 @@
       "cwe_count": 1,
       "d3fend_count": 0,
       "rfc_count": 4,
-      "last_threat_review": "2026-05-11",
+      "last_threat_review": "2026-06-10",
       "path": "skills/coordinated-vuln-disclosure/skill.md",
       "handoff_targets": [
         "attack-surface-pentest",
@@ -1056,7 +1056,7 @@
       "cwe_count": 0,
       "d3fend_count": 0,
       "rfc_count": 0,
-      "last_threat_review": "2026-05-11",
+      "last_threat_review": "2026-06-10",
       "path": "skills/threat-modeling-methodology/skill.md",
       "handoff_targets": [
         "ai-attack-surface",
@@ -1132,7 +1132,7 @@
       "cwe_count": 17,
       "d3fend_count": 5,
       "rfc_count": 4,
-      "last_threat_review": "2026-05-11",
+      "last_threat_review": "2026-06-10",
       "path": "skills/webapp-security/skill.md",
       "handoff_targets": [
         "ai-attack-surface",
@@ -1245,7 +1245,7 @@
       "cwe_count": 4,
       "d3fend_count": 3,
       "rfc_count": 2,
-      "last_threat_review": "2026-05-11",
+      "last_threat_review": "2026-06-10",
       "path": "skills/sector-healthcare/skill.md",
       "handoff_targets": [
         "ai-attack-surface",
@@ -1314,7 +1314,7 @@
       "cwe_count": 5,
       "d3fend_count": 4,
       "rfc_count": 4,
-      "last_threat_review": "2026-05-15",
+      "last_threat_review": "2026-06-10",
       "path": "skills/sector-financial/skill.md",
       "handoff_targets": [
         "ai-attack-surface",
@@ -1373,7 +1373,7 @@
       "cwe_count": 3,
       "d3fend_count": 3,
       "rfc_count": 2,
-      "last_threat_review": "2026-05-11",
+      "last_threat_review": "2026-06-10",
       "path": "skills/sector-federal-government/skill.md",
       "handoff_targets": [
         "ai-attack-surface",
@@ -1431,7 +1431,7 @@
       "cwe_count": 4,
       "d3fend_count": 5,
       "rfc_count": 0,
-      "last_threat_review": "2026-05-11",
+      "last_threat_review": "2026-06-10",
       "path": "skills/sector-energy/skill.md",
       "handoff_targets": [
         "ai-attack-surface",
@@ -1562,7 +1562,7 @@
       "cwe_count": 9,
       "d3fend_count": 5,
       "rfc_count": 7,
-      "last_threat_review": "2026-05-18",
+      "last_threat_review": "2026-06-10",
       "path": "skills/api-security/skill.md",
       "handoff_targets": [
         "ai-c2-detection",
@@ -1627,7 +1627,7 @@
       "cwe_count": 6,
       "d3fend_count": 5,
       "rfc_count": 4,
-      "last_threat_review": "2026-05-11",
+      "last_threat_review": "2026-06-10",
       "path": "skills/cloud-security/skill.md",
       "handoff_targets": [
         "ai-c2-detection",
@@ -1694,7 +1694,7 @@
       "cwe_count": 5,
       "d3fend_count": 6,
       "rfc_count": 2,
-      "last_threat_review": "2026-05-15",
+      "last_threat_review": "2026-06-10",
       "path": "skills/container-runtime-security/skill.md",
       "handoff_targets": [
         "ai-attack-surface",
@@ -1765,7 +1765,7 @@
       "cwe_count": 4,
       "d3fend_count": 3,
       "rfc_count": 1,
-      "last_threat_review": "2026-05-22",
+      "last_threat_review": "2026-06-10",
       "path": "skills/mlops-security/skill.md",
       "handoff_targets": [
         "ai-attack-surface",
@@ -1822,7 +1822,7 @@
       "cwe_count": 0,
       "d3fend_count": 4,
       "rfc_count": 3,
-      "last_threat_review": "2026-05-22",
+      "last_threat_review": "2026-06-10",
       "path": "skills/incident-response-playbook/skill.md",
       "handoff_targets": [
         "ai-attack-surface",
@@ -1884,7 +1884,7 @@
       "cwe_count": 2,
       "d3fend_count": 4,
       "rfc_count": 0,
-      "last_threat_review": "2026-05-22",
+      "last_threat_review": "2026-06-10",
       "path": "skills/ransomware-response/skill.md",
       "handoff_targets": [
         "compliance-theater",
@@ -1991,7 +1991,7 @@
       "cwe_count": 3,
       "d3fend_count": 3,
       "rfc_count": 0,
-      "last_threat_review": "2026-05-11",
+      "last_threat_review": "2026-06-10",
       "path": "skills/age-gates-child-safety/skill.md",
       "handoff_targets": [
         "ai-attack-surface",