@blamejs/exceptd-skills 0.19.0 → 0.19.2

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (71) hide show
  1. package/AGENTS.md +5 -5
  2. package/ARCHITECTURE.md +3 -3
  3. package/CHANGELOG.md +21 -1
  4. package/CONTEXT.md +6 -6
  5. package/README.md +6 -6
  6. package/data/_indexes/_meta.json +46 -46
  7. package/data/_indexes/activity-feed.json +17 -17
  8. package/data/_indexes/catalog-summaries.json +10 -10
  9. package/data/_indexes/chains.json +2890 -2798
  10. package/data/_indexes/frequency.json +12 -8
  11. package/data/_indexes/recipes.json +1 -1
  12. package/data/_indexes/section-offsets.json +165 -165
  13. package/data/_indexes/summary-cards.json +4 -4
  14. package/data/_indexes/token-budget.json +68 -68
  15. package/data/_indexes/xref.json +2 -2
  16. package/data/atlas-ttps.json +140 -79
  17. package/data/attack-techniques.json +22 -209
  18. package/data/cve-catalog.json +440 -332
  19. package/data/d3fend-catalog.json +5 -5
  20. package/data/dlp-controls.json +1 -1
  21. package/data/framework-control-gaps.json +8 -8
  22. package/data/playbooks/audit-log-integrity.json +2 -2
  23. package/data/playbooks/hardening.json +1 -1
  24. package/data/zeroday-lessons.json +2 -2
  25. package/manifest-snapshot.json +8 -8
  26. package/manifest-snapshot.sha256 +1 -1
  27. package/manifest.json +95 -95
  28. package/package.json +2 -2
  29. package/sbom.cdx.json +166 -121
  30. package/scripts/builders/catalog-summaries.js +1 -1
  31. package/scripts/builders/recipes.js +1 -1
  32. package/scripts/check-epss-consistency.js +189 -0
  33. package/scripts/check-ttp-references.js +152 -0
  34. package/scripts/check-ttp-upstream.js +202 -0
  35. package/scripts/check-version-tags.js +50 -6
  36. package/scripts/predeploy.js +26 -0
  37. package/skills/age-gates-child-safety/skill.md +2 -2
  38. package/skills/ai-attack-surface/skill.md +3 -3
  39. package/skills/ai-c2-detection/skill.md +4 -4
  40. package/skills/api-security/skill.md +1 -1
  41. package/skills/attack-surface-pentest/skill.md +3 -3
  42. package/skills/audit-log-integrity/skill.md +3 -3
  43. package/skills/cloud-iam-incident/skill.md +1 -1
  44. package/skills/cloud-security/skill.md +2 -2
  45. package/skills/compliance-theater/skill.md +2 -2
  46. package/skills/container-runtime-security/skill.md +2 -2
  47. package/skills/coordinated-vuln-disclosure/skill.md +1 -1
  48. package/skills/defensive-countermeasure-mapping/skill.md +1 -1
  49. package/skills/dlp-gap-analysis/skill.md +4 -4
  50. package/skills/exploit-scoring/skill.md +1 -1
  51. package/skills/framework-gap-analysis/skill.md +3 -3
  52. package/skills/fuzz-testing-strategy/skill.md +1 -1
  53. package/skills/incident-response-playbook/skill.md +7 -7
  54. package/skills/mcp-agent-trust/skill.md +1 -1
  55. package/skills/mlops-security/skill.md +3 -3
  56. package/skills/ot-ics-security/skill.md +5 -5
  57. package/skills/policy-exception-gen/skill.md +2 -2
  58. package/skills/pqc-first/skill.md +1 -1
  59. package/skills/rag-pipeline-security/skill.md +4 -4
  60. package/skills/ransomware-response/skill.md +2 -2
  61. package/skills/sector-energy/skill.md +9 -9
  62. package/skills/sector-federal-government/skill.md +1 -1
  63. package/skills/sector-financial/skill.md +3 -3
  64. package/skills/sector-healthcare/skill.md +2 -2
  65. package/skills/security-maturity-tiers/skill.md +1 -1
  66. package/skills/skill-update-loop/skill.md +5 -5
  67. package/skills/supply-chain-integrity/skill.md +1 -1
  68. package/skills/threat-model-currency/skill.md +7 -7
  69. package/skills/threat-modeling-methodology/skill.md +1 -1
  70. package/skills/webapp-security/skill.md +1 -1
  71. package/skills/zeroday-gap-learn/skill.md +2 -2
package/data/_indexes/frequency.json CHANGED
@@ -1789,7 +1789,7 @@
1789
1789
  "identity-assurance"
1790
1790
  ]
1791
1791
  },
1792
- "T0855": {
1792
+ "T1692.001": {
1793
1793
  "count": 2,
1794
1794
  "skills": [
1795
1795
  "ot-ics-security",
@@ -1956,7 +1956,7 @@
1956
1956
  "privacy-consent-ops"
1957
1957
  ]
1958
1958
  },
1959
- "T1562.008": {
1959
+ "T1685.002": {
1960
1960
  "count": 1,
1961
1961
  "skills": [
1962
1962
  "audit-log-integrity"
@@ -3167,7 +3167,6 @@
3167
3167
  "T1552",
3168
3168
  "T1552.005",
3169
3169
  "T1556.007",
3170
- "T1562.008",
3171
3170
  "T1566.001",
3172
3171
  "T1566.002",
3173
3172
  "T1566.003",
@@ -3177,7 +3176,8 @@
3177
3176
  "T1606",
3178
3177
  "T1606.002",
3179
3178
  "T1610",
3180
- "T1611"
3179
+ "T1611",
3180
+ "T1685.002"
3181
3181
  ],
3182
3182
  "rfc_refs": [
3183
3183
  "CSAF-2.0",
@@ -3437,7 +3437,6 @@
3437
3437
  "AML.T0018.000",
3438
3438
  "AML.T0018.001",
3439
3439
  "AML.T0018.002",
3440
- "AML.T0019",
3441
3440
  "AML.T0021",
3442
3441
  "AML.T0024",
3443
3442
  "AML.T0024.000",
@@ -3481,7 +3480,6 @@
3481
3480
  "AML.T0055",
3482
3481
  "AML.T0056",
3483
3482
  "AML.T0057",
3484
- "AML.T0058",
3485
3483
  "AML.T0059",
3486
3484
  "AML.T0060",
3487
3485
  "AML.T0061",
@@ -3528,6 +3526,7 @@
3528
3526
  "AML.T0090",
3529
3527
  "AML.T0091",
3530
3528
  "AML.T0091.000",
3529
+ "AML.T0091.001",
3531
3530
  "AML.T0092",
3532
3531
  "AML.T0093",
3533
3532
  "AML.T0094",
@@ -3540,7 +3539,6 @@
3540
3539
  "AML.T0101",
3541
3540
  "AML.T0102",
3542
3541
  "AML.T0103",
3543
- "AML.T0104",
3544
3542
  "AML.T0105",
3545
3543
  "AML.T0106",
3546
3544
  "AML.T0107",
@@ -3550,7 +3548,13 @@
3550
3548
  "AML.T0111",
3551
3549
  "AML.T0112",
3552
3550
  "AML.T0112.000",
3553
- "AML.T0112.001"
3551
+ "AML.T0112.001",
3552
+ "AML.T0113",
3553
+ "AML.T0114",
3554
+ "AML.T0115",
3555
+ "AML.T0115.000",
3556
+ "AML.T0115.001",
3557
+ "AML.T0115.002"
3554
3558
  ],
3555
3559
  "d3fend_refs": [
3556
3560
  "D3-AA",
package/data/_indexes/recipes.json CHANGED
@@ -19,7 +19,7 @@
19
19
  "steps": [
20
20
  {
21
21
  "skill": "ai-attack-surface",
22
- "why": "Comprehensive attack-surface inventory mapped to ATLAS v2026.06 with gap flags."
22
+ "why": "Comprehensive attack-surface inventory mapped to ATLAS v2026.07 with gap flags."
23
23
  },
24
24
  {
25
25
  "skill": "ai-c2-detection",