@blamejs/exceptd-skills 0.18.27 → 0.18.29

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (31) hide show
  1. package/CHANGELOG.md +22 -0
  2. package/bin/exceptd.js +25 -8
  3. package/data/_indexes/_meta.json +17 -17
  4. package/data/_indexes/activity-feed.json +35 -35
  5. package/data/_indexes/catalog-summaries.json +8 -8
  6. package/data/_indexes/chains.json +59435 -24
  7. package/data/_indexes/currency.json +6 -6
  8. package/data/_indexes/frequency.json +117 -39
  9. package/data/_indexes/handoff-dag.json +36 -16
  10. package/data/_indexes/jurisdiction-map.json +3 -1
  11. package/data/_indexes/section-offsets.json +166 -148
  12. package/data/_indexes/summary-cards.json +41 -10
  13. package/data/_indexes/token-budget.json +63 -53
  14. package/data/_indexes/xref.json +43 -3
  15. package/data/attack-techniques.json +452 -45
  16. package/data/cve-catalog.json +10507 -18
  17. package/data/cwe-catalog.json +469 -7
  18. package/data/d3fend-catalog.json +41 -8
  19. package/data/framework-control-gaps.json +507 -7
  20. package/data/rfc-references.json +23 -4
  21. package/data/zeroday-lessons.json +8638 -14
  22. package/lib/currency-severity.js +60 -0
  23. package/lib/validate-package.js +5 -3
  24. package/manifest-snapshot.json +40 -6
  25. package/manifest-snapshot.sha256 +1 -1
  26. package/manifest.json +99 -62
  27. package/package.json +2 -2
  28. package/sbom.cdx.json +56 -41
  29. package/skills/global-grc/skill.md +106 -17
  30. package/skills/pqc-first/skill.md +3 -2
  31. package/skills/security-maturity-tiers/skill.md +56 -6
package/data/d3fend-catalog.json CHANGED
@@ -58,11 +58,13 @@
58
58
  "defensive-countermeasure-mapping",
59
59
  "dlp-gap-analysis",
60
60
  "fuzz-testing-strategy",
61
+ "global-grc",
61
62
  "kernel-lpe-triage",
62
63
  "mcp-agent-trust",
63
64
  "mlops-security",
64
65
  "sector-energy",
65
66
  "sector-federal-government",
67
+ "security-maturity-tiers",
66
68
  "supply-chain-integrity",
67
69
  "webapp-security"
68
70
  ],
@@ -301,7 +303,9 @@
301
303
  ],
302
304
  "skills_referencing": [
303
305
  "defensive-countermeasure-mapping",
304
- "pqc-first"
306
+ "global-grc",
307
+ "pqc-first",
308
+ "security-maturity-tiers"
305
309
  ],
306
310
  "implementation_examples": [
307
311
  "TLS 1.3 with hybrid X25519MLKEM768 key exchange (RFC 9794-class drafts)",
@@ -339,6 +343,7 @@
339
343
  ],
340
344
  "skills_referencing": [
341
345
  "defensive-countermeasure-mapping",
346
+ "global-grc",
342
347
  "pqc-first"
343
348
  ],
344
349
  "implementation_examples": [
@@ -427,11 +432,13 @@
427
432
  "cloud-iam-incident",
428
433
  "defensive-countermeasure-mapping",
429
434
  "email-security-anti-phishing",
435
+ "global-grc",
430
436
  "identity-assurance",
431
437
  "idp-incident-response",
432
438
  "mcp-agent-trust",
433
439
  "sector-financial",
434
440
  "sector-healthcare",
441
+ "security-maturity-tiers",
435
442
  "webapp-security"
436
443
  ],
437
444
  "implementation_examples": [
@@ -562,6 +569,7 @@
562
569
  "defensive-countermeasure-mapping",
563
570
  "dlp-gap-analysis",
564
571
  "email-security-anti-phishing",
572
+ "global-grc",
565
573
  "idp-incident-response",
566
574
  "incident-response-playbook",
567
575
  "rag-pipeline-security",
@@ -569,6 +577,7 @@
569
577
  "sector-energy",
570
578
  "sector-financial",
571
579
  "sector-telecom",
580
+ "security-maturity-tiers",
572
581
  "webapp-security"
573
582
  ],
574
583
  "implementation_examples": [
@@ -666,12 +675,14 @@
666
675
  "defensive-countermeasure-mapping",
667
676
  "dlp-gap-analysis",
668
677
  "email-security-anti-phishing",
678
+ "global-grc",
669
679
  "identity-assurance",
670
680
  "incident-response-playbook",
671
681
  "mcp-agent-trust",
672
682
  "rag-pipeline-security",
673
683
  "ransomware-response",
674
684
  "sector-healthcare",
685
+ "security-maturity-tiers",
675
686
  "webapp-security"
676
687
  ],
677
688
  "implementation_examples": [
@@ -722,6 +733,7 @@
722
733
  "dlp-gap-analysis",
723
734
  "email-security-anti-phishing",
724
735
  "fuzz-testing-strategy",
736
+ "global-grc",
725
737
  "idp-incident-response",
726
738
  "incident-response-playbook",
727
739
  "mlops-security",
@@ -730,6 +742,7 @@
730
742
  "sector-financial",
731
743
  "sector-healthcare",
732
744
  "sector-telecom",
745
+ "security-maturity-tiers",
733
746
  "webapp-security"
734
747
  ],
735
748
  "implementation_examples": [
@@ -810,7 +823,9 @@
810
823
  "skills_referencing": [
811
824
  "ai-attack-surface",
812
825
  "defensive-countermeasure-mapping",
813
- "rag-pipeline-security"
826
+ "global-grc",
827
+ "rag-pipeline-security",
828
+ "security-maturity-tiers"
814
829
  ],
815
830
  "implementation_examples": [
816
831
  "auditd FIM with behavioral rules",
@@ -850,8 +865,10 @@
850
865
  "ai-c2-detection",
851
866
  "container-runtime-security",
852
867
  "defensive-countermeasure-mapping",
868
+ "global-grc",
853
869
  "sector-energy",
854
- "sector-telecom"
870
+ "sector-telecom",
871
+ "security-maturity-tiers"
855
872
  ],
856
873
  "implementation_examples": [
857
874
  "VPC egress allowlists with no default internet route",
@@ -1128,7 +1145,10 @@
1128
1145
  "cgroup",
1129
1146
  "LSM Profile"
1130
1147
  ],
1131
- "skills_referencing": [],
1148
+ "skills_referencing": [
1149
+ "global-grc",
1150
+ "security-maturity-tiers"
1151
+ ],
1132
1152
  "implementation_examples": [
1133
1153
  "SELinux / AppArmor confinement profiles per workload",
1134
1154
  "Linux user namespaces + capability dropping (CAP_SYS_ADMIN removed)",
@@ -1163,7 +1183,10 @@
1163
1183
  "System Call",
1164
1184
  "Process Behavior"
1165
1185
  ],
1166
- "skills_referencing": [],
1186
+ "skills_referencing": [
1187
+ "global-grc",
1188
+ "security-maturity-tiers"
1189
+ ],
1167
1190
  "implementation_examples": [
1168
1191
  "Linux auditd with syscall rules (ausearch -k privesc)",
1169
1192
  "Falco runtime rules on suspicious syscall sequences",
@@ -1240,7 +1263,10 @@
1240
1263
  "Firmware",
1241
1264
  "OS Image"
1242
1265
  ],
1243
- "skills_referencing": [],
1266
+ "skills_referencing": [
1267
+ "global-grc",
1268
+ "security-maturity-tiers"
1269
+ ],
1244
1270
  "implementation_examples": [
1245
1271
  "YARA",
1246
1272
  "PEStudio / PEiD",
@@ -3005,7 +3031,10 @@
3005
3031
  "reference_url": "https://d3fend.mitre.org/technique/D3-ITF/",
3006
3032
  "last_verified": "2026-05-19",
3007
3033
  "_auto_imported": true,
3008
- "_intake_method": "mitre-d3fend-owl"
3034
+ "_intake_method": "mitre-d3fend-owl",
3035
+ "skills_referencing": [
3036
+ "security-maturity-tiers"
3037
+ ]
3009
3038
  },
3010
3039
  "D3-JFAPA": {
3011
3040
  "id": "D3-JFAPA",
@@ -3682,7 +3711,11 @@
3682
3711
  "reference_url": "https://d3fend.mitre.org/technique/D3-OTF/",
3683
3712
  "last_verified": "2026-05-19",
3684
3713
  "_auto_imported": true,
3685
- "_intake_method": "mitre-d3fend-owl"
3714
+ "_intake_method": "mitre-d3fend-owl",
3715
+ "skills_referencing": [
3716
+ "global-grc",
3717
+ "security-maturity-tiers"
3718
+ ]
3686
3719
  },
3687
3720
  "D3-OTP": {
3688
3721
  "id": "D3-OTP",