@blamejs/exceptd-skills 0.19.0 → 0.19.1

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (62) hide show
  1. package/AGENTS.md +5 -5
  2. package/ARCHITECTURE.md +3 -3
  3. package/CHANGELOG.md +10 -0
  4. package/README.md +5 -5
  5. package/data/_indexes/_meta.json +42 -42
  6. package/data/_indexes/activity-feed.json +17 -17
  7. package/data/_indexes/catalog-summaries.json +10 -10
  8. package/data/_indexes/chains.json +2715 -2715
  9. package/data/_indexes/frequency.json +9 -8
  10. package/data/_indexes/recipes.json +1 -1
  11. package/data/_indexes/section-offsets.json +129 -129
  12. package/data/_indexes/summary-cards.json +4 -4
  13. package/data/_indexes/token-budget.json +44 -44
  14. package/data/_indexes/xref.json +2 -2
  15. package/data/atlas-ttps.json +95 -78
  16. package/data/attack-techniques.json +21 -208
  17. package/data/cve-catalog.json +8 -8
  18. package/data/framework-control-gaps.json +8 -8
  19. package/data/playbooks/audit-log-integrity.json +2 -2
  20. package/data/playbooks/hardening.json +1 -1
  21. package/manifest-snapshot.json +8 -8
  22. package/manifest-snapshot.sha256 +1 -1
  23. package/manifest.json +94 -94
  24. package/package.json +2 -2
  25. package/sbom.cdx.json +122 -107
  26. package/scripts/builders/catalog-summaries.js +1 -1
  27. package/scripts/builders/recipes.js +1 -1
  28. package/scripts/check-ttp-upstream.js +202 -0
  29. package/skills/age-gates-child-safety/skill.md +2 -2
  30. package/skills/ai-attack-surface/skill.md +3 -3
  31. package/skills/ai-c2-detection/skill.md +4 -4
  32. package/skills/api-security/skill.md +1 -1
  33. package/skills/attack-surface-pentest/skill.md +3 -3
  34. package/skills/audit-log-integrity/skill.md +3 -3
  35. package/skills/cloud-iam-incident/skill.md +1 -1
  36. package/skills/cloud-security/skill.md +2 -2
  37. package/skills/compliance-theater/skill.md +2 -2
  38. package/skills/container-runtime-security/skill.md +2 -2
  39. package/skills/coordinated-vuln-disclosure/skill.md +1 -1
  40. package/skills/dlp-gap-analysis/skill.md +4 -4
  41. package/skills/exploit-scoring/skill.md +1 -1
  42. package/skills/framework-gap-analysis/skill.md +3 -3
  43. package/skills/fuzz-testing-strategy/skill.md +1 -1
  44. package/skills/incident-response-playbook/skill.md +2 -2
  45. package/skills/mcp-agent-trust/skill.md +1 -1
  46. package/skills/mlops-security/skill.md +2 -2
  47. package/skills/ot-ics-security/skill.md +5 -5
  48. package/skills/policy-exception-gen/skill.md +2 -2
  49. package/skills/pqc-first/skill.md +1 -1
  50. package/skills/rag-pipeline-security/skill.md +3 -3
  51. package/skills/ransomware-response/skill.md +1 -1
  52. package/skills/sector-energy/skill.md +9 -9
  53. package/skills/sector-federal-government/skill.md +1 -1
  54. package/skills/sector-financial/skill.md +3 -3
  55. package/skills/sector-healthcare/skill.md +2 -2
  56. package/skills/security-maturity-tiers/skill.md +1 -1
  57. package/skills/skill-update-loop/skill.md +5 -5
  58. package/skills/supply-chain-integrity/skill.md +1 -1
  59. package/skills/threat-model-currency/skill.md +7 -7
  60. package/skills/threat-modeling-methodology/skill.md +1 -1
  61. package/skills/webapp-security/skill.md +1 -1
  62. package/skills/zeroday-gap-learn/skill.md +2 -2
@@ -150,7 +150,7 @@
150
150
  "h3_count": 0
151
151
  },
152
152
  {
153
- "name": "TTP Mapping (MITRE ATLAS v2026.06)",
153
+ "name": "TTP Mapping (MITRE ATLAS v2026.07)",
154
154
  "normalized_name": "ttp-mapping",
155
155
  "line": 173,
156
156
  "byte_start": 17188,
@@ -338,7 +338,7 @@
338
338
  "h3_count": 1
339
339
  },
340
340
  {
341
- "name": "TTP Mapping (MITRE ATLAS v2026.06 and ATT&CK)",
341
+ "name": "TTP Mapping (MITRE ATLAS v2026.07 and ATT&CK)",
342
342
  "normalized_name": "ttp-mapping",
343
343
  "line": 74,
344
344
  "byte_start": 6584,
@@ -450,7 +450,7 @@
450
450
  "h3_count": 0
451
451
  },
452
452
  {
453
- "name": "TTP Mapping (MITRE ATLAS v2026.06 and ATT&CK)",
453
+ "name": "TTP Mapping (MITRE ATLAS v2026.07 and ATT&CK)",
454
454
  "normalized_name": "ttp-mapping",
455
455
  "line": 81,
456
456
  "byte_start": 12106,
@@ -710,7 +710,7 @@
710
710
  "h3_count": 0
711
711
  },
712
712
  {
713
- "name": "TTP Mapping (MITRE ATLAS v2026.06)",
713
+ "name": "TTP Mapping (MITRE ATLAS v2026.07)",
714
714
  "normalized_name": "ttp-mapping",
715
715
  "line": 185,
716
716
  "byte_start": 12544,
@@ -831,7 +831,7 @@
831
831
  "h3_count": 2
832
832
  },
833
833
  {
834
- "name": "TTP Mapping (MITRE ATLAS v2026.06 + MITRE ATT&CK)",
834
+ "name": "TTP Mapping (MITRE ATLAS v2026.07 + MITRE ATT&CK)",
835
835
  "normalized_name": "ttp-mapping",
836
836
  "line": 333,
837
837
  "byte_start": 17125,
@@ -934,7 +934,7 @@
934
934
  "h3_count": 0
935
935
  },
936
936
  {
937
- "name": "TTP Mapping (MITRE ATLAS v2026.06 and ATT&CK)",
937
+ "name": "TTP Mapping (MITRE ATLAS v2026.07 and ATT&CK)",
938
938
  "normalized_name": "ttp-mapping",
939
939
  "line": 91,
940
940
  "byte_start": 9601,
@@ -1000,7 +1000,7 @@
1000
1000
  },
1001
1001
  "threat-model-currency": {
1002
1002
  "path": "skills/threat-model-currency/skill.md",
1003
- "total_bytes": 33297,
1003
+ "total_bytes": 33301,
1004
1004
  "total_lines": 448,
1005
1005
  "frontmatter": {
1006
1006
  "line_start": 1,
@@ -1032,16 +1032,16 @@
1032
1032
  "normalized_name": "the-14-threat-class-checklist",
1033
1033
  "line": 43,
1034
1034
  "byte_start": 2180,
1035
- "byte_end": 13300,
1036
- "bytes": 11120,
1035
+ "byte_end": 13304,
1036
+ "bytes": 11124,
1037
1037
  "h3_count": 14
1038
1038
  },
1039
1039
  {
1040
1040
  "name": "Threat Context",
1041
1041
  "normalized_name": "threat-context",
1042
1042
  "line": 228,
1043
- "byte_start": 13300,
1044
- "byte_end": 15131,
1043
+ "byte_start": 13304,
1044
+ "byte_end": 15135,
1045
1045
  "bytes": 1831,
1046
1046
  "h3_count": 0
1047
1047
  },
@@ -1049,8 +1049,8 @@
1049
1049
  "name": "Framework Lag Declaration",
1050
1050
  "normalized_name": "framework-lag-declaration",
1051
1051
  "line": 242,
1052
- "byte_start": 15131,
1053
- "byte_end": 17719,
1052
+ "byte_start": 15135,
1053
+ "byte_end": 17723,
1054
1054
  "bytes": 2588,
1055
1055
  "h3_count": 0
1056
1056
  },
@@ -1058,8 +1058,8 @@
1058
1058
  "name": "TTP Mapping",
1059
1059
  "normalized_name": "ttp-mapping",
1060
1060
  "line": 264,
1061
- "byte_start": 17719,
1062
- "byte_end": 20818,
1061
+ "byte_start": 17723,
1062
+ "byte_end": 20822,
1063
1063
  "bytes": 3099,
1064
1064
  "h3_count": 0
1065
1065
  },
@@ -1067,8 +1067,8 @@
1067
1067
  "name": "Exploit Availability Matrix",
1068
1068
  "normalized_name": "exploit-availability-matrix",
1069
1069
  "line": 289,
1070
- "byte_start": 20818,
1071
- "byte_end": 23171,
1070
+ "byte_start": 20822,
1071
+ "byte_end": 23175,
1072
1072
  "bytes": 2353,
1073
1073
  "h3_count": 0
1074
1074
  },
@@ -1076,8 +1076,8 @@
1076
1076
  "name": "Compliance Theater Check",
1077
1077
  "normalized_name": "compliance-theater-check",
1078
1078
  "line": 308,
1079
- "byte_start": 23171,
1080
- "byte_end": 24739,
1079
+ "byte_start": 23175,
1080
+ "byte_end": 24743,
1081
1081
  "bytes": 1568,
1082
1082
  "h3_count": 0
1083
1083
  },
@@ -1085,8 +1085,8 @@
1085
1085
  "name": "Scoring",
1086
1086
  "normalized_name": "scoring",
1087
1087
  "line": 324,
1088
- "byte_start": 24739,
1089
- "byte_end": 25281,
1088
+ "byte_start": 24743,
1089
+ "byte_end": 25285,
1090
1090
  "bytes": 542,
1091
1091
  "h3_count": 0
1092
1092
  },
@@ -1094,8 +1094,8 @@
1094
1094
  "name": "Analysis Procedure",
1095
1095
  "normalized_name": "analysis-procedure",
1096
1096
  "line": 343,
1097
- "byte_start": 25281,
1098
- "byte_end": 26211,
1097
+ "byte_start": 25285,
1098
+ "byte_end": 26215,
1099
1099
  "bytes": 930,
1100
1100
  "h3_count": 4
1101
1101
  },
@@ -1103,8 +1103,8 @@
1103
1103
  "name": "Output Format",
1104
1104
  "normalized_name": "output-format",
1105
1105
  "line": 375,
1106
- "byte_start": 26211,
1107
- "byte_end": 28197,
1106
+ "byte_start": 26215,
1107
+ "byte_end": 28201,
1108
1108
  "bytes": 1986,
1109
1109
  "h3_count": 0
1110
1110
  },
@@ -1112,8 +1112,8 @@
1112
1112
  "name": "Defensive Countermeasure Mapping",
1113
1113
  "normalized_name": "defensive-countermeasure-mapping",
1114
1114
  "line": 417,
1115
- "byte_start": 28197,
1116
- "byte_end": 33297,
1115
+ "byte_start": 28201,
1116
+ "byte_end": 33301,
1117
1117
  "bytes": 5100,
1118
1118
  "h3_count": 0
1119
1119
  }
@@ -1502,7 +1502,7 @@
1502
1502
  },
1503
1503
  "skill-update-loop": {
1504
1504
  "path": "skills/skill-update-loop/skill.md",
1505
- "total_bytes": 47847,
1505
+ "total_bytes": 47843,
1506
1506
  "total_lines": 522,
1507
1507
  "frontmatter": {
1508
1508
  "line_start": 1,
@@ -1534,16 +1534,16 @@
1534
1534
  "normalized_name": "ttp-mapping",
1535
1535
  "line": 67,
1536
1536
  "byte_start": 3702,
1537
- "byte_end": 4794,
1538
- "bytes": 1092,
1537
+ "byte_end": 4790,
1538
+ "bytes": 1088,
1539
1539
  "h3_count": 0
1540
1540
  },
1541
1541
  {
1542
1542
  "name": "Why Skills Decay",
1543
1543
  "normalized_name": "why-skills-decay",
1544
1544
  "line": 84,
1545
- "byte_start": 4794,
1546
- "byte_end": 5681,
1545
+ "byte_start": 4790,
1546
+ "byte_end": 5677,
1547
1547
  "bytes": 887,
1548
1548
  "h3_count": 0
1549
1549
  },
@@ -1551,8 +1551,8 @@
1551
1551
  "name": "Update Triggers and Assigned Skills",
1552
1552
  "normalized_name": "update-triggers-and-assigned-skills",
1553
1553
  "line": 101,
1554
- "byte_start": 5681,
1555
- "byte_end": 33156,
1554
+ "byte_start": 5677,
1555
+ "byte_end": 33152,
1556
1556
  "bytes": 27475,
1557
1557
  "h3_count": 12
1558
1558
  },
@@ -1560,8 +1560,8 @@
1560
1560
  "name": "Skill Currency Scores",
1561
1561
  "normalized_name": "skill-currency-scores",
1562
1562
  "line": 350,
1563
- "byte_start": 33156,
1564
- "byte_end": 33746,
1563
+ "byte_start": 33152,
1564
+ "byte_end": 33742,
1565
1565
  "bytes": 590,
1566
1566
  "h3_count": 0
1567
1567
  },
@@ -1569,8 +1569,8 @@
1569
1569
  "name": "Running the Update Loop",
1570
1570
  "normalized_name": "running-the-update-loop",
1571
1571
  "line": 371,
1572
- "byte_start": 33746,
1573
- "byte_end": 34698,
1572
+ "byte_start": 33742,
1573
+ "byte_end": 34694,
1574
1574
  "bytes": 952,
1575
1575
  "h3_count": 3
1576
1576
  },
@@ -1578,8 +1578,8 @@
1578
1578
  "name": "Analysis Procedure",
1579
1579
  "normalized_name": "analysis-procedure",
1580
1580
  "line": 400,
1581
- "byte_start": 34698,
1582
- "byte_end": 35590,
1581
+ "byte_start": 34694,
1582
+ "byte_end": 35586,
1583
1583
  "bytes": 892,
1584
1584
  "h3_count": 4
1585
1585
  },
@@ -1587,8 +1587,8 @@
1587
1587
  "name": "Output Format",
1588
1588
  "normalized_name": "output-format",
1589
1589
  "line": 432,
1590
- "byte_start": 35590,
1591
- "byte_end": 36644,
1590
+ "byte_start": 35586,
1591
+ "byte_end": 36640,
1592
1592
  "bytes": 1054,
1593
1593
  "h3_count": 0
1594
1594
  },
@@ -1596,8 +1596,8 @@
1596
1596
  "name": "Framework Lag Declaration",
1597
1597
  "normalized_name": "framework-lag-declaration",
1598
1598
  "line": 459,
1599
- "byte_start": 36644,
1600
- "byte_end": 39447,
1599
+ "byte_start": 36640,
1600
+ "byte_end": 39443,
1601
1601
  "bytes": 2803,
1602
1602
  "h3_count": 0
1603
1603
  },
@@ -1605,8 +1605,8 @@
1605
1605
  "name": "Exploit Availability Matrix",
1606
1606
  "normalized_name": "exploit-availability-matrix",
1607
1607
  "line": 478,
1608
- "byte_start": 39447,
1609
- "byte_end": 42176,
1608
+ "byte_start": 39443,
1609
+ "byte_end": 42172,
1610
1610
  "bytes": 2729,
1611
1611
  "h3_count": 0
1612
1612
  },
@@ -1614,8 +1614,8 @@
1614
1614
  "name": "Compliance Theater Check",
1615
1615
  "normalized_name": "compliance-theater-check",
1616
1616
  "line": 499,
1617
- "byte_start": 42176,
1618
- "byte_end": 43853,
1617
+ "byte_start": 42172,
1618
+ "byte_end": 43849,
1619
1619
  "bytes": 1677,
1620
1620
  "h3_count": 0
1621
1621
  },
@@ -1623,8 +1623,8 @@
1623
1623
  "name": "Defensive Countermeasure Mapping",
1624
1624
  "normalized_name": "defensive-countermeasure-mapping",
1625
1625
  "line": 509,
1626
- "byte_start": 43853,
1627
- "byte_end": 47847,
1626
+ "byte_start": 43849,
1627
+ "byte_end": 47843,
1628
1628
  "bytes": 3994,
1629
1629
  "h3_count": 0
1630
1630
  }
@@ -1911,7 +1911,7 @@
1911
1911
  "h3_count": 0
1912
1912
  },
1913
1913
  {
1914
- "name": "TTP Mapping (MITRE ATLAS v2026.06 + MITRE ATT&CK v19.1)",
1914
+ "name": "TTP Mapping (MITRE ATLAS v2026.07 + MITRE ATT&CK v19.2)",
1915
1915
  "normalized_name": "ttp-mapping",
1916
1916
  "line": 124,
1917
1917
  "byte_start": 10955,
@@ -1996,7 +1996,7 @@
1996
1996
  "h3_count": 0
1997
1997
  },
1998
1998
  {
1999
- "name": "TTP Mapping (MITRE ATLAS v2026.06 + MITRE ATT&CK Enterprise)",
1999
+ "name": "TTP Mapping (MITRE ATLAS v2026.07 + MITRE ATT&CK Enterprise)",
2000
2000
  "normalized_name": "ttp-mapping",
2001
2001
  "line": 90,
2002
2002
  "byte_start": 9884,
@@ -2081,7 +2081,7 @@
2081
2081
  "h3_count": 1
2082
2082
  },
2083
2083
  {
2084
- "name": "TTP Mapping (MITRE ATLAS v2026.06 + MITRE ATT&CK)",
2084
+ "name": "TTP Mapping (MITRE ATLAS v2026.07 + MITRE ATT&CK)",
2085
2085
  "normalized_name": "ttp-mapping",
2086
2086
  "line": 127,
2087
2087
  "byte_start": 14990,
@@ -2411,21 +2411,21 @@
2411
2411
  },
2412
2412
  "ot-ics-security": {
2413
2413
  "path": "skills/ot-ics-security/skill.md",
2414
- "total_bytes": 37122,
2414
+ "total_bytes": 37134,
2415
2415
  "total_lines": 344,
2416
2416
  "frontmatter": {
2417
2417
  "line_start": 1,
2418
2418
  "line_end": 48,
2419
2419
  "byte_start": 0,
2420
- "byte_end": 1068
2420
+ "byte_end": 1072
2421
2421
  },
2422
2422
  "sections": [
2423
2423
  {
2424
2424
  "name": "Threat Context (mid-2026)",
2425
2425
  "normalized_name": "threat-context",
2426
2426
  "line": 52,
2427
- "byte_start": 1101,
2428
- "byte_end": 4592,
2427
+ "byte_start": 1105,
2428
+ "byte_end": 4596,
2429
2429
  "bytes": 3491,
2430
2430
  "h3_count": 0
2431
2431
  },
@@ -2433,8 +2433,8 @@
2433
2433
  "name": "Framework Lag Declaration",
2434
2434
  "normalized_name": "framework-lag-declaration",
2435
2435
  "line": 68,
2436
- "byte_start": 4592,
2437
- "byte_end": 9074,
2436
+ "byte_start": 4596,
2437
+ "byte_end": 9078,
2438
2438
  "bytes": 4482,
2439
2439
  "h3_count": 0
2440
2440
  },
@@ -2442,17 +2442,17 @@
2442
2442
  "name": "TTP Mapping",
2443
2443
  "normalized_name": "ttp-mapping",
2444
2444
  "line": 89,
2445
- "byte_start": 9074,
2446
- "byte_end": 12810,
2447
- "bytes": 3736,
2445
+ "byte_start": 9078,
2446
+ "byte_end": 12822,
2447
+ "bytes": 3744,
2448
2448
  "h3_count": 0
2449
2449
  },
2450
2450
  {
2451
2451
  "name": "Exploit Availability Matrix",
2452
2452
  "normalized_name": "exploit-availability-matrix",
2453
2453
  "line": 111,
2454
- "byte_start": 12810,
2455
- "byte_end": 15129,
2454
+ "byte_start": 12822,
2455
+ "byte_end": 15141,
2456
2456
  "bytes": 2319,
2457
2457
  "h3_count": 0
2458
2458
  },
@@ -2460,8 +2460,8 @@
2460
2460
  "name": "Analysis Procedure",
2461
2461
  "normalized_name": "analysis-procedure",
2462
2462
  "line": 124,
2463
- "byte_start": 15129,
2464
- "byte_end": 23881,
2463
+ "byte_start": 15141,
2464
+ "byte_end": 23893,
2465
2465
  "bytes": 8752,
2466
2466
  "h3_count": 10
2467
2467
  },
@@ -2469,8 +2469,8 @@
2469
2469
  "name": "Output Format",
2470
2470
  "normalized_name": "output-format",
2471
2471
  "line": 220,
2472
- "byte_start": 23881,
2473
- "byte_end": 26653,
2472
+ "byte_start": 23893,
2473
+ "byte_end": 26665,
2474
2474
  "bytes": 2772,
2475
2475
  "h3_count": 0
2476
2476
  },
@@ -2478,8 +2478,8 @@
2478
2478
  "name": "Compliance Theater Check",
2479
2479
  "normalized_name": "compliance-theater-check",
2480
2480
  "line": 278,
2481
- "byte_start": 26653,
2482
- "byte_end": 29858,
2481
+ "byte_start": 26665,
2482
+ "byte_end": 29870,
2483
2483
  "bytes": 3205,
2484
2484
  "h3_count": 0
2485
2485
  },
@@ -2487,8 +2487,8 @@
2487
2487
  "name": "Defensive Countermeasure Mapping",
2488
2488
  "normalized_name": "defensive-countermeasure-mapping",
2489
2489
  "line": 312,
2490
- "byte_start": 29858,
2491
- "byte_end": 33312,
2490
+ "byte_start": 29870,
2491
+ "byte_end": 33324,
2492
2492
  "bytes": 3454,
2493
2493
  "h3_count": 0
2494
2494
  },
@@ -2496,8 +2496,8 @@
2496
2496
  "name": "Hand-Off / Related Skills",
2497
2497
  "normalized_name": "hand-off",
2498
2498
  "line": 328,
2499
- "byte_start": 33312,
2500
- "byte_end": 37122,
2499
+ "byte_start": 33324,
2500
+ "byte_end": 37134,
2501
2501
  "bytes": 3810,
2502
2502
  "h3_count": 0
2503
2503
  }
@@ -2739,7 +2739,7 @@
2739
2739
  "h3_count": 0
2740
2740
  },
2741
2741
  {
2742
- "name": "TTP Mapping (MITRE ATT&CK Enterprise + ATLAS v2026.06)",
2742
+ "name": "TTP Mapping (MITRE ATT&CK Enterprise + ATLAS v2026.07)",
2743
2743
  "normalized_name": "ttp-mapping",
2744
2744
  "line": 108,
2745
2745
  "byte_start": 8717,
@@ -3190,30 +3190,30 @@
3190
3190
  },
3191
3191
  "sector-energy": {
3192
3192
  "path": "skills/sector-energy/skill.md",
3193
- "total_bytes": 54792,
3193
+ "total_bytes": 54824,
3194
3194
  "total_lines": 412,
3195
3195
  "frontmatter": {
3196
3196
  "line_start": 1,
3197
3197
  "line_end": 61,
3198
3198
  "byte_start": 0,
3199
- "byte_end": 2609
3199
+ "byte_end": 2613
3200
3200
  },
3201
3201
  "sections": [
3202
3202
  {
3203
3203
  "name": "Threat Context (mid-2026)",
3204
3204
  "normalized_name": "threat-context",
3205
3205
  "line": 67,
3206
- "byte_start": 3345,
3207
- "byte_end": 8723,
3208
- "bytes": 5378,
3206
+ "byte_start": 3349,
3207
+ "byte_end": 8735,
3208
+ "bytes": 5386,
3209
3209
  "h3_count": 0
3210
3210
  },
3211
3211
  {
3212
3212
  "name": "Framework Lag Declaration",
3213
3213
  "normalized_name": "framework-lag-declaration",
3214
3214
  "line": 93,
3215
- "byte_start": 8723,
3216
- "byte_end": 17067,
3215
+ "byte_start": 8735,
3216
+ "byte_end": 17079,
3217
3217
  "bytes": 8344,
3218
3218
  "h3_count": 0
3219
3219
  },
@@ -3221,17 +3221,17 @@
3221
3221
  "name": "TTP Mapping",
3222
3222
  "normalized_name": "ttp-mapping",
3223
3223
  "line": 118,
3224
- "byte_start": 17067,
3225
- "byte_end": 23445,
3226
- "bytes": 6378,
3224
+ "byte_start": 17079,
3225
+ "byte_end": 23473,
3226
+ "bytes": 6394,
3227
3227
  "h3_count": 0
3228
3228
  },
3229
3229
  {
3230
3230
  "name": "Exploit Availability Matrix",
3231
3231
  "normalized_name": "exploit-availability-matrix",
3232
3232
  "line": 144,
3233
- "byte_start": 23445,
3234
- "byte_end": 27472,
3233
+ "byte_start": 23473,
3234
+ "byte_end": 27500,
3235
3235
  "bytes": 4027,
3236
3236
  "h3_count": 0
3237
3237
  },
@@ -3239,17 +3239,17 @@
3239
3239
  "name": "Analysis Procedure",
3240
3240
  "normalized_name": "analysis-procedure",
3241
3241
  "line": 162,
3242
- "byte_start": 27472,
3243
- "byte_end": 38418,
3244
- "bytes": 10946,
3242
+ "byte_start": 27500,
3243
+ "byte_end": 38450,
3244
+ "bytes": 10950,
3245
3245
  "h3_count": 13
3246
3246
  },
3247
3247
  {
3248
3248
  "name": "Output Format",
3249
3249
  "normalized_name": "output-format",
3250
3250
  "line": 274,
3251
- "byte_start": 38418,
3252
- "byte_end": 41878,
3251
+ "byte_start": 38450,
3252
+ "byte_end": 41910,
3253
3253
  "bytes": 3460,
3254
3254
  "h3_count": 0
3255
3255
  },
@@ -3257,8 +3257,8 @@
3257
3257
  "name": "Compliance Theater Check",
3258
3258
  "normalized_name": "compliance-theater-check",
3259
3259
  "line": 341,
3260
- "byte_start": 41878,
3261
- "byte_end": 46869,
3260
+ "byte_start": 41910,
3261
+ "byte_end": 46901,
3262
3262
  "bytes": 4991,
3263
3263
  "h3_count": 0
3264
3264
  },
@@ -3266,8 +3266,8 @@
3266
3266
  "name": "Defensive Countermeasure Mapping",
3267
3267
  "normalized_name": "defensive-countermeasure-mapping",
3268
3268
  "line": 379,
3269
- "byte_start": 46869,
3270
- "byte_end": 51417,
3269
+ "byte_start": 46901,
3270
+ "byte_end": 51449,
3271
3271
  "bytes": 4548,
3272
3272
  "h3_count": 0
3273
3273
  },
@@ -3275,8 +3275,8 @@
3275
3275
  "name": "Hand-Off / Related Skills",
3276
3276
  "normalized_name": "hand-off",
3277
3277
  "line": 395,
3278
- "byte_start": 51417,
3279
- "byte_end": 54792,
3278
+ "byte_start": 51449,
3279
+ "byte_end": 54824,
3280
3280
  "bytes": 3375,
3281
3281
  "h3_count": 0
3282
3282
  }
@@ -3406,7 +3406,7 @@
3406
3406
  "h3_count": 0
3407
3407
  },
3408
3408
  {
3409
- "name": "TTP Mapping (MITRE ATT&CK Enterprise + ATLAS v2026.06)",
3409
+ "name": "TTP Mapping (MITRE ATT&CK Enterprise + ATLAS v2026.07)",
3410
3410
  "normalized_name": "ttp-mapping",
3411
3411
  "line": 129,
3412
3412
  "byte_start": 12457,
@@ -3754,7 +3754,7 @@
3754
3754
  },
3755
3755
  "incident-response-playbook": {
3756
3756
  "path": "skills/incident-response-playbook/skill.md",
3757
- "total_bytes": 63031,
3757
+ "total_bytes": 63036,
3758
3758
  "total_lines": 549,
3759
3759
  "frontmatter": {
3760
3760
  "line_start": 1,
@@ -3786,16 +3786,16 @@
3786
3786
  "normalized_name": "ttp-mapping",
3787
3787
  "line": 117,
3788
3788
  "byte_start": 18687,
3789
- "byte_end": 23639,
3790
- "bytes": 4952,
3789
+ "byte_end": 23644,
3790
+ "bytes": 4957,
3791
3791
  "h3_count": 0
3792
3792
  },
3793
3793
  {
3794
3794
  "name": "Exploit Availability Matrix",
3795
3795
  "normalized_name": "exploit-availability-matrix",
3796
3796
  "line": 135,
3797
- "byte_start": 23639,
3798
- "byte_end": 27450,
3797
+ "byte_start": 23644,
3798
+ "byte_end": 27455,
3799
3799
  "bytes": 3811,
3800
3800
  "h3_count": 0
3801
3801
  },
@@ -3803,8 +3803,8 @@
3803
3803
  "name": "Analysis Procedure",
3804
3804
  "normalized_name": "analysis-procedure",
3805
3805
  "line": 159,
3806
- "byte_start": 27450,
3807
- "byte_end": 41848,
3806
+ "byte_start": 27455,
3807
+ "byte_end": 41853,
3808
3808
  "bytes": 14398,
3809
3809
  "h3_count": 10
3810
3810
  },
@@ -3812,8 +3812,8 @@
3812
3812
  "name": "Output Format",
3813
3813
  "normalized_name": "output-format",
3814
3814
  "line": 279,
3815
- "byte_start": 41848,
3816
- "byte_end": 50975,
3815
+ "byte_start": 41853,
3816
+ "byte_end": 50980,
3817
3817
  "bytes": 9127,
3818
3818
  "h3_count": 7
3819
3819
  },
@@ -3821,8 +3821,8 @@
3821
3821
  "name": "Compliance Theater Check",
3822
3822
  "normalized_name": "compliance-theater-check",
3823
3823
  "line": 495,
3824
- "byte_start": 50975,
3825
- "byte_end": 54872,
3824
+ "byte_start": 50980,
3825
+ "byte_end": 54877,
3826
3826
  "bytes": 3897,
3827
3827
  "h3_count": 0
3828
3828
  },
@@ -3830,8 +3830,8 @@
3830
3830
  "name": "Defensive Countermeasure Mapping",
3831
3831
  "normalized_name": "defensive-countermeasure-mapping",
3832
3832
  "line": 511,
3833
- "byte_start": 54872,
3834
- "byte_end": 59854,
3833
+ "byte_start": 54877,
3834
+ "byte_end": 59859,
3835
3835
  "bytes": 4982,
3836
3836
  "h3_count": 0
3837
3837
  },
@@ -3839,8 +3839,8 @@
3839
3839
  "name": "Hand-Off / Related Skills",
3840
3840
  "normalized_name": "hand-off",
3841
3841
  "line": 530,
3842
- "byte_start": 59854,
3843
- "byte_end": 63031,
3842
+ "byte_start": 59859,
3843
+ "byte_end": 63036,
3844
3844
  "bytes": 3177,
3845
3845
  "h3_count": 0
3846
3846
  }
@@ -3848,7 +3848,7 @@
3848
3848
  },
3849
3849
  "ransomware-response": {
3850
3850
  "path": "skills/ransomware-response/skill.md",
3851
- "total_bytes": 48434,
3851
+ "total_bytes": 48439,
3852
3852
  "total_lines": 371,
3853
3853
  "frontmatter": {
3854
3854
  "line_start": 1,
@@ -3880,16 +3880,16 @@
3880
3880
  "normalized_name": "ttp-mapping",
3881
3881
  "line": 121,
3882
3882
  "byte_start": 16933,
3883
- "byte_end": 19170,
3884
- "bytes": 2237,
3883
+ "byte_end": 19175,
3884
+ "bytes": 2242,
3885
3885
  "h3_count": 0
3886
3886
  },
3887
3887
  {
3888
3888
  "name": "Exploit Availability Matrix",
3889
3889
  "normalized_name": "exploit-availability-matrix",
3890
3890
  "line": 136,
3891
- "byte_start": 19170,
3892
- "byte_end": 21762,
3891
+ "byte_start": 19175,
3892
+ "byte_end": 21767,
3893
3893
  "bytes": 2592,
3894
3894
  "h3_count": 0
3895
3895
  },
@@ -3897,8 +3897,8 @@
3897
3897
  "name": "Analysis Procedure",
3898
3898
  "normalized_name": "analysis-procedure",
3899
3899
  "line": 156,
3900
- "byte_start": 21762,
3901
- "byte_end": 33319,
3900
+ "byte_start": 21767,
3901
+ "byte_end": 33324,
3902
3902
  "bytes": 11557,
3903
3903
  "h3_count": 10
3904
3904
  },
@@ -3906,8 +3906,8 @@
3906
3906
  "name": "Output Format",
3907
3907
  "normalized_name": "output-format",
3908
3908
  "line": 218,
3909
- "byte_start": 33319,
3910
- "byte_end": 37130,
3909
+ "byte_start": 33324,
3910
+ "byte_end": 37135,
3911
3911
  "bytes": 3811,
3912
3912
  "h3_count": 6
3913
3913
  },
@@ -3915,8 +3915,8 @@
3915
3915
  "name": "Compliance Theater Check",
3916
3916
  "normalized_name": "compliance-theater-check",
3917
3917
  "line": 321,
3918
- "byte_start": 37130,
3919
- "byte_end": 40917,
3918
+ "byte_start": 37135,
3919
+ "byte_end": 40922,
3920
3920
  "bytes": 3787,
3921
3921
  "h3_count": 0
3922
3922
  },
@@ -3924,8 +3924,8 @@
3924
3924
  "name": "Defensive Countermeasure Mapping",
3925
3925
  "normalized_name": "defensive-countermeasure-mapping",
3926
3926
  "line": 337,
3927
- "byte_start": 40917,
3928
- "byte_end": 44584,
3927
+ "byte_start": 40922,
3928
+ "byte_end": 44589,
3929
3929
  "bytes": 3667,
3930
3930
  "h3_count": 0
3931
3931
  },
@@ -3933,8 +3933,8 @@
3933
3933
  "name": "Hand-Off / Related Skills",
3934
3934
  "normalized_name": "hand-off",
3935
3935
  "line": 356,
3936
- "byte_start": 44584,
3937
- "byte_end": 48434,
3936
+ "byte_start": 44589,
3937
+ "byte_end": 48439,
3938
3938
  "bytes": 3850,
3939
3939
  "h3_count": 0
3940
3940
  }