@blamejs/exceptd-skills 0.19.1 → 0.19.3

package/data/_indexes/frequency.json

@@ -3526,6 +3526,7 @@
       "AML.T0090",
       "AML.T0091",
       "AML.T0091.000",
+      "AML.T0091.001",
       "AML.T0092",
       "AML.T0093",
       "AML.T0094",
@@ -3548,6 +3549,8 @@
       "AML.T0112",
       "AML.T0112.000",
       "AML.T0112.001",
+      "AML.T0113",
+      "AML.T0114",
       "AML.T0115",
       "AML.T0115.000",
       "AML.T0115.001",

package/data/_indexes/section-offsets.json

@@ -637,7 +637,7 @@
     },
     "rag-pipeline-security": {
       "path": "skills/rag-pipeline-security/skill.md",
-      "total_bytes": 32046,
+      "total_bytes": 32096,
       "total_lines": 334,
       "frontmatter": {
         "line_start": 1,
@@ -714,16 +714,16 @@
           "normalized_name": "ttp-mapping",
           "line": 185,
           "byte_start": 12544,
-          "byte_end": 16190,
-          "bytes": 3646,
+          "byte_end": 16240,
+          "bytes": 3696,
           "h3_count": 0
         },
         {
           "name": "Exploit Availability Matrix",
           "normalized_name": "exploit-availability-matrix",
           "line": 199,
-          "byte_start": 16190,
-          "byte_end": 21530,
+          "byte_start": 16240,
+          "byte_end": 21580,
           "bytes": 5340,
           "h3_count": 1
         },
@@ -731,8 +731,8 @@
           "name": "Analysis Procedure",
           "normalized_name": "analysis-procedure",
           "line": 219,
-          "byte_start": 21530,
-          "byte_end": 23250,
+          "byte_start": 21580,
+          "byte_end": 23300,
           "bytes": 1720,
           "h3_count": 4
         },
@@ -740,8 +740,8 @@
           "name": "Output Format",
           "normalized_name": "output-format",
           "line": 261,
-          "byte_start": 23250,
-          "byte_end": 24795,
+          "byte_start": 23300,
+          "byte_end": 24845,
           "bytes": 1545,
           "h3_count": 0
         },
@@ -749,8 +749,8 @@
           "name": "Hand-Off / Related Skills",
           "normalized_name": "hand-off",
           "line": 295,
-          "byte_start": 24795,
-          "byte_end": 27463,
+          "byte_start": 24845,
+          "byte_end": 27513,
           "bytes": 2668,
           "h3_count": 0
         },
@@ -758,8 +758,8 @@
           "name": "Defensive Countermeasure Mapping",
           "normalized_name": "defensive-countermeasure-mapping",
           "line": 309,
-          "byte_start": 27463,
-          "byte_end": 31402,
+          "byte_start": 27513,
+          "byte_end": 31452,
           "bytes": 3939,
           "h3_count": 0
         },
@@ -767,8 +767,8 @@
           "name": "Compliance Theater Check",
           "normalized_name": "compliance-theater-check",
           "line": 331,
-          "byte_start": 31402,
-          "byte_end": 32046,
+          "byte_start": 31452,
+          "byte_end": 32096,
           "bytes": 644,
           "h3_count": 0
         }
@@ -3660,7 +3660,7 @@
     },
     "mlops-security": {
       "path": "skills/mlops-security/skill.md",
-      "total_bytes": 46778,
+      "total_bytes": 46834,
       "total_lines": 332,
       "frontmatter": {
         "line_start": 1,
@@ -3692,16 +3692,16 @@
           "normalized_name": "ttp-mapping",
           "line": 112,
           "byte_start": 14429,
-          "byte_end": 18807,
-          "bytes": 4378,
+          "byte_end": 18863,
+          "bytes": 4434,
           "h3_count": 0
         },
         {
           "name": "Exploit Availability Matrix",
           "normalized_name": "exploit-availability-matrix",
           "line": 137,
-          "byte_start": 18807,
-          "byte_end": 24362,
+          "byte_start": 18863,
+          "byte_end": 24418,
           "bytes": 5555,
           "h3_count": 0
         },
@@ -3709,8 +3709,8 @@
           "name": "Analysis Procedure",
           "normalized_name": "analysis-procedure",
           "line": 163,
-          "byte_start": 24362,
-          "byte_end": 33431,
+          "byte_start": 24418,
+          "byte_end": 33487,
           "bytes": 9069,
           "h3_count": 4
         },
@@ -3718,8 +3718,8 @@
           "name": "Output Format",
           "normalized_name": "output-format",
           "line": 228,
-          "byte_start": 33431,
-          "byte_end": 36853,
+          "byte_start": 33487,
+          "byte_end": 36909,
           "bytes": 3422,
           "h3_count": 0
         },
@@ -3727,8 +3727,8 @@
           "name": "Compliance Theater Check",
           "normalized_name": "compliance-theater-check",
           "line": 283,
-          "byte_start": 36853,
-          "byte_end": 39784,
+          "byte_start": 36909,
+          "byte_end": 39840,
           "bytes": 2931,
           "h3_count": 0
         },
@@ -3736,8 +3736,8 @@
           "name": "Defensive Countermeasure Mapping",
           "normalized_name": "defensive-countermeasure-mapping",
           "line": 299,
-          "byte_start": 39784,
-          "byte_end": 43824,
+          "byte_start": 39840,
+          "byte_end": 43880,
           "bytes": 4040,
           "h3_count": 0
         },
@@ -3745,8 +3745,8 @@
           "name": "Hand-Off / Related Skills",
           "normalized_name": "hand-off",
           "line": 319,
-          "byte_start": 43824,
-          "byte_end": 46778,
+          "byte_start": 43880,
+          "byte_end": 46834,
           "bytes": 2954,
           "h3_count": 0
         }
@@ -3754,7 +3754,7 @@
     },
     "incident-response-playbook": {
       "path": "skills/incident-response-playbook/skill.md",
-      "total_bytes": 63036,
+      "total_bytes": 63072,
       "total_lines": 549,
       "frontmatter": {
         "line_start": 1,
@@ -3777,16 +3777,16 @@
           "normalized_name": "framework-lag-declaration",
           "line": 84,
           "byte_start": 8489,
-          "byte_end": 18687,
-          "bytes": 10198,
+          "byte_end": 18695,
+          "bytes": 10206,
           "h3_count": 0
         },
         {
           "name": "TTP Mapping",
           "normalized_name": "ttp-mapping",
           "line": 117,
-          "byte_start": 18687,
-          "byte_end": 23644,
+          "byte_start": 18695,
+          "byte_end": 23652,
           "bytes": 4957,
           "h3_count": 0
         },
@@ -3794,8 +3794,8 @@
           "name": "Exploit Availability Matrix",
           "normalized_name": "exploit-availability-matrix",
           "line": 135,
-          "byte_start": 23644,
-          "byte_end": 27455,
+          "byte_start": 23652,
+          "byte_end": 27463,
           "bytes": 3811,
           "h3_count": 0
         },
@@ -3803,17 +3803,17 @@
           "name": "Analysis Procedure",
           "normalized_name": "analysis-procedure",
           "line": 159,
-          "byte_start": 27455,
-          "byte_end": 41853,
-          "bytes": 14398,
+          "byte_start": 27463,
+          "byte_end": 41873,
+          "bytes": 14410,
           "h3_count": 10
         },
         {
           "name": "Output Format",
           "normalized_name": "output-format",
           "line": 279,
-          "byte_start": 41853,
-          "byte_end": 50980,
+          "byte_start": 41873,
+          "byte_end": 51000,
           "bytes": 9127,
           "h3_count": 7
         },
@@ -3821,26 +3821,26 @@
           "name": "Compliance Theater Check",
           "normalized_name": "compliance-theater-check",
           "line": 495,
-          "byte_start": 50980,
-          "byte_end": 54877,
-          "bytes": 3897,
+          "byte_start": 51000,
+          "byte_end": 54905,
+          "bytes": 3905,
           "h3_count": 0
         },
         {
           "name": "Defensive Countermeasure Mapping",
           "normalized_name": "defensive-countermeasure-mapping",
           "line": 511,
-          "byte_start": 54877,
-          "byte_end": 59859,
-          "bytes": 4982,
+          "byte_start": 54905,
+          "byte_end": 59895,
+          "bytes": 4990,
           "h3_count": 0
         },
         {
           "name": "Hand-Off / Related Skills",
           "normalized_name": "hand-off",
           "line": 530,
-          "byte_start": 59859,
-          "byte_end": 63036,
+          "byte_start": 59895,
+          "byte_end": 63072,
           "bytes": 3177,
           "h3_count": 0
         }
@@ -3848,7 +3848,7 @@
     },
     "ransomware-response": {
       "path": "skills/ransomware-response/skill.md",
-      "total_bytes": 48439,
+      "total_bytes": 48447,
       "total_lines": 371,
       "frontmatter": {
         "line_start": 1,
@@ -3880,16 +3880,16 @@
           "normalized_name": "ttp-mapping",
           "line": 121,
           "byte_start": 16933,
-          "byte_end": 19175,
-          "bytes": 2242,
+          "byte_end": 19183,
+          "bytes": 2250,
           "h3_count": 0
         },
         {
           "name": "Exploit Availability Matrix",
           "normalized_name": "exploit-availability-matrix",
           "line": 136,
-          "byte_start": 19175,
-          "byte_end": 21767,
+          "byte_start": 19183,
+          "byte_end": 21775,
           "bytes": 2592,
           "h3_count": 0
         },
@@ -3897,8 +3897,8 @@
           "name": "Analysis Procedure",
           "normalized_name": "analysis-procedure",
           "line": 156,
-          "byte_start": 21767,
-          "byte_end": 33324,
+          "byte_start": 21775,
+          "byte_end": 33332,
           "bytes": 11557,
           "h3_count": 10
         },
@@ -3906,8 +3906,8 @@
           "name": "Output Format",
           "normalized_name": "output-format",
           "line": 218,
-          "byte_start": 33324,
-          "byte_end": 37135,
+          "byte_start": 33332,
+          "byte_end": 37143,
           "bytes": 3811,
           "h3_count": 6
         },
@@ -3915,8 +3915,8 @@
           "name": "Compliance Theater Check",
           "normalized_name": "compliance-theater-check",
           "line": 321,
-          "byte_start": 37135,
-          "byte_end": 40922,
+          "byte_start": 37143,
+          "byte_end": 40930,
           "bytes": 3787,
           "h3_count": 0
         },
@@ -3924,8 +3924,8 @@
           "name": "Defensive Countermeasure Mapping",
           "normalized_name": "defensive-countermeasure-mapping",
           "line": 337,
-          "byte_start": 40922,
-          "byte_end": 44589,
+          "byte_start": 40930,
+          "byte_end": 44597,
           "bytes": 3667,
           "h3_count": 0
         },
@@ -3933,8 +3933,8 @@
           "name": "Hand-Off / Related Skills",
           "normalized_name": "hand-off",
           "line": 356,
-          "byte_start": 44589,
-          "byte_end": 48439,
+          "byte_start": 44597,
+          "byte_end": 48447,
           "bytes": 3850,
           "h3_count": 0
         }

package/data/_indexes/token-budget.json

@@ -3,8 +3,8 @@
     "schema_version": "1.0.0",
     "tokenizer_note": "Character-density approximation: 1 token ≈ 4 chars. This is the canonical rule-of-thumb for OpenAI tokenizers on English+technical text. Claude's tokenizer is typically more efficient on prose; treat this as an upper-bound budget for both. Consumers with stricter precision needs should re-tokenize with their own tokenizer.",
     "approx_chars_per_token": 4,
-    "total_chars": 1767951,
-    "total_approx_tokens": 441995,
+    "total_chars": 1768101,
+    "total_approx_tokens": 442032,
     "skill_count": 51
   },
   "skills": {
@@ -370,10 +370,10 @@
     },
     "rag-pipeline-security": {
       "path": "skills/rag-pipeline-security/skill.md",
-      "bytes": 32046,
-      "chars": 31871,
+      "bytes": 32096,
+      "chars": 31921,
       "lines": 334,
-      "approx_tokens": 7968,
+      "approx_tokens": 7980,
       "approx_chars_per_token": 4,
       "sections": {
         "threat-context": {
@@ -412,9 +412,9 @@
           "approx_tokens": 538
         },
         "ttp-mapping": {
-          "bytes": 3646,
-          "chars": 3620,
-          "approx_tokens": 905
+          "bytes": 3696,
+          "chars": 3670,
+          "approx_tokens": 918
         },
         "exploit-availability-matrix": {
           "bytes": 5340,
@@ -2130,10 +2130,10 @@
     },
     "mlops-security": {
       "path": "skills/mlops-security/skill.md",
-      "bytes": 46778,
-      "chars": 46482,
+      "bytes": 46834,
+      "chars": 46538,
       "lines": 332,
-      "approx_tokens": 11621,
+      "approx_tokens": 11635,
       "approx_chars_per_token": 4,
       "sections": {
         "threat-context": {
@@ -2147,9 +2147,9 @@
           "approx_tokens": 1441
         },
         "ttp-mapping": {
-          "bytes": 4378,
-          "chars": 4354,
-          "approx_tokens": 1089
+          "bytes": 4434,
+          "chars": 4410,
+          "approx_tokens": 1103
         },
         "exploit-availability-matrix": {
           "bytes": 5555,
@@ -2185,10 +2185,10 @@
     },
     "incident-response-playbook": {
       "path": "skills/incident-response-playbook/skill.md",
-      "bytes": 63036,
-      "chars": 62784,
+      "bytes": 63072,
+      "chars": 62820,
       "lines": 549,
-      "approx_tokens": 15696,
+      "approx_tokens": 15705,
       "approx_chars_per_token": 4,
       "sections": {
         "threat-context": {
@@ -2197,9 +2197,9 @@
           "approx_tokens": 1218
         },
         "framework-lag-declaration": {
-          "bytes": 10198,
-          "chars": 10164,
-          "approx_tokens": 2541
+          "bytes": 10206,
+          "chars": 10172,
+          "approx_tokens": 2543
         },
         "ttp-mapping": {
           "bytes": 4957,
@@ -2212,9 +2212,9 @@
           "approx_tokens": 952
         },
         "analysis-procedure": {
-          "bytes": 14398,
-          "chars": 14325,
-          "approx_tokens": 3581
+          "bytes": 14410,
+          "chars": 14337,
+          "approx_tokens": 3584
         },
         "output-format": {
           "bytes": 9127,
@@ -2222,14 +2222,14 @@
           "approx_tokens": 2272
         },
         "compliance-theater-check": {
-          "bytes": 3897,
-          "chars": 3870,
-          "approx_tokens": 968
+          "bytes": 3905,
+          "chars": 3878,
+          "approx_tokens": 970
         },
         "defensive-countermeasure-mapping": {
-          "bytes": 4982,
-          "chars": 4968,
-          "approx_tokens": 1242
+          "bytes": 4990,
+          "chars": 4976,
+          "approx_tokens": 1244
         },
         "hand-off": {
           "bytes": 3177,
@@ -2240,10 +2240,10 @@
     },
     "ransomware-response": {
       "path": "skills/ransomware-response/skill.md",
-      "bytes": 48439,
-      "chars": 48257,
+      "bytes": 48447,
+      "chars": 48265,
       "lines": 371,
-      "approx_tokens": 12064,
+      "approx_tokens": 12066,
       "approx_chars_per_token": 4,
       "sections": {
         "threat-context": {
@@ -2257,9 +2257,9 @@
           "approx_tokens": 1692
         },
         "ttp-mapping": {
-          "bytes": 2242,
-          "chars": 2240,
-          "approx_tokens": 560
+          "bytes": 2250,
+          "chars": 2248,
+          "approx_tokens": 562
         },
         "exploit-availability-matrix": {
           "bytes": 2592,

package/data/atlas-ttps.json

@@ -8,7 +8,7 @@
     "last_updated": "2026-08-08",
     "last_threat_review": "2026-08-08",
     "source": "https://atlas.mitre.org",
-    "note": "AI-relevant ATLAS TTPs with framework_gap field, curated as a subset of the full ATLAS matrix and pinned to v2026.07. ATLAS content follows a YYYY.MM calendar-versioning scheme; the CalVer scheme and the per-technique platform tags (Predictive AI, Generative AI, Agentic AI, Enterprise) were introduced in v2026.05. The v2026.05 → v2026.07 audit (AGENTS.md Hard Rule #12) confirmed the release is additive with NO technique-ID removals or renames, so every AML.T* id curated in this file remains valid. Upstream v2026.07 additionally published three new techniques — AML.T0113 (Steal Web Session Cookie), AML.T0091.001 (Use Alternate Authentication Material: Web Session Cookie), and AML.T0114 (AI Service Web Interface) — refreshed AML.T0054 (LLM Jailbreak), and shipped new case studies (EchoLeak zero-click prompt injection, AI-in-the-Middle C2 relays, Semantic Kernel RCE); these newly-published techniques are not yet ingested into this curated subset and are tracked as future-curation candidates (the subset intentionally trails the full matrix, e.g. 170 curated of the full ATLAS technique set). framework_gap: no framework has a control that addresses this TTP. secure_ai_v2_layer flags entries included in the CTID Secure AI v2 layered set (May 2026); maturity reflects CTID's technique-maturity classification (low / moderate / high).",
+    "note": "AI-relevant ATLAS TTPs with framework_gap field, curated as a subset of the full ATLAS matrix and pinned to v2026.07. ATLAS content follows a YYYY.MM calendar-versioning scheme; the CalVer scheme and the per-technique platform tags (Predictive AI, Generative AI, Agentic AI, Enterprise) were introduced in v2026.05. v2026.07 consolidated three separately-numbered publish-poisoned techniques — AML.T0019 (datasets), AML.T0058 (models) and AML.T0104 (agent tools) — under a single parent, AML.T0115 (Publish Poisoned AI Artifacts), with the artifact class recorded by sub-technique. Those three ids are retired upstream; entries carrying them here were re-keyed and declare a `supersedes` field so an operator holding older data can still join the two. v2026.07 also published AML.T0113 (Steal Web Session Cookie), AML.T0091.001 (Use Alternate Authentication Material: Web Session Cookie) and AML.T0114 (AI Service Web Interface), all three carried here, and refreshed AML.T0054 (LLM Jailbreak). This curated subset holds 174 techniques and intentionally trails the full matrix. framework_gap: no framework has a control that addresses this TTP. secure_ai_v2_layer flags entries included in the CTID Secure AI v2 layered set (May 2026); maturity reflects CTID's technique-maturity classification (low / moderate / high).",
     "tlp": "CLEAR",
     "source_confidence": {
       "scheme": "Admiralty (A-F + 1-6)",
@@ -2344,7 +2344,10 @@
       "ATLAS"
     ],
     "stix_id": "attack-pattern--dcbb91c4-3fcc-5c1b-b851-795600618124",
-    "is_subtechnique": false
+    "is_subtechnique": false,
+    "subtechniques": [
+      "AML.T0091.001"
+    ]
   },
   "AML.T0092": {
     "id": "AML.T0092",
@@ -3622,7 +3625,9 @@
     "description": "Adversary publishes a poisoned AI artifact — a dataset, a model, or an agent tool — to a distribution channel where a victim will discover and consume it. ATLAS 2026.07 consolidated the three previously separate publish-poisoned techniques under this parent; the sub-techniques record which artifact class is published.",
     "supersedes": "AML.T0019, AML.T0058, AML.T0104",
     "cve_refs": [],
-    "exceptd_skills": []
+    "exceptd_skills": [],
+    "stix_id": "attack-pattern--625576d9-f6b7-556e-bfed-35828f8476e3",
+    "last_verified": "2026-08-08"
   },
   "AML.T0115.000": {
     "id": "AML.T0115.000",
@@ -3630,17 +3635,16 @@
     "tactic": "Resource Development",
     "description": "Adversaries may [Poison Training Data](/techniques/AML.T0020) and publish it to a public location.",
     "reference_url": "https://atlas.mitre.org/techniques/AML.T0115.000",
-    "last_verified": "2026-05-19",
-    "_auto_imported": true,
-    "_intake_method": "v0.13.18-bulk-mitre-atlas-stix",
+    "last_verified": "2026-08-08",
     "description_full": "Adversaries may [Poison Training Data](/techniques/AML.T0020) and publish it to a public location. The poisoned dataset may be a novel dataset or a poisoned variant of an existing open source dataset. This data may be introduced to a victim system via [AI Supply Chain Compromise](/techniques/AML.T0010).",
     "platforms": [
       "ATLAS"
     ],
-    "stix_id": "attack-pattern--c38896b2-974c-5ed5-adeb-c2477b311353",
+    "stix_id": "attack-pattern--639ae26e-0aad-5969-ad81-a6ef134297c6",
     "is_subtechnique": true,
     "supersedes": "AML.T0019",
-    "parent_technique": "AML.T0115"
+    "parent_technique": "AML.T0115",
+    "superseded_stix_id": "attack-pattern--c38896b2-974c-5ed5-adeb-c2477b311353"
   },
   "AML.T0115.001": {
     "id": "AML.T0115.001",
@@ -3648,17 +3652,16 @@
     "tactic": "Resource Development",
     "description": "Adversaries may publish a poisoned model to a public location such as a model registry or code repository.",
     "reference_url": "https://atlas.mitre.org/techniques/AML.T0115.001",
-    "last_verified": "2026-05-19",
-    "_auto_imported": true,
-    "_intake_method": "v0.13.18-bulk-mitre-atlas-stix",
+    "last_verified": "2026-08-08",
     "description_full": "Adversaries may publish a poisoned model to a public location such as a model registry or code repository. The poisoned model may be a novel model or a poisoned variant of an existing open-source model. This model may be introduced to a victim system via [AI Supply Chain Compromise](/techniques/AML.T0010).",
     "platforms": [
       "ATLAS"
     ],
-    "stix_id": "attack-pattern--d4c7f78e-4609-555c-a2eb-3d344dab3309",
+    "stix_id": "attack-pattern--28b3b5f8-fc35-5fd2-bc4b-b7d2cfec3110",
     "is_subtechnique": true,
     "supersedes": "AML.T0058",
-    "parent_technique": "AML.T0115"
+    "parent_technique": "AML.T0115",
+    "superseded_stix_id": "attack-pattern--d4c7f78e-4609-555c-a2eb-3d344dab3309"
   },
   "AML.T0115.002": {
     "id": "AML.T0115.002",
@@ -3682,18 +3685,59 @@
     "exceptd_skills": [],
     "secure_ai_v2_layer": true,
     "maturity": "high",
-    "last_verified": "2026-05-19",
+    "last_verified": "2026-08-08",
     "description_full": "Adversaries may create and publish poisoned AI agent tools. Poisoned tools may contain an [LLM Prompt Injection](/techniques/AML.T0051), which can lead to a variety of impacts. Tools may be published to open source version control repositories (e.g. GitHub, GitLab), to package registries (e.g. npm), or to repositories specifically designed for sharing tools (e.g. OpenClaw Hub). These registries may be largely unregulated and may contain many poisoned tools [\\[1\\]][1]. Tools may also be published as remotely hosted servers [\\[2\\]][2]. [1]: https://opensourcemalware.com/blog/clawdbot-skills-ganked-your-crypto [2]: https://mcpservers.org/remote-mcp-servers",
     "platforms": [
       "ATLAS"
     ],
     "reference_url": "https://atlas.mitre.org/techniques/AML.T0115.002",
-    "stix_id": "attack-pattern--04842d98-bb69-586e-9765-6ff1f56ef722",
+    "stix_id": "attack-pattern--75f2d288-ce6a-5f97-a79a-b621903b526a",
     "is_subtechnique": true,
     "cve_refs": [
       "CVE-2025-54136"
     ],
     "supersedes": "AML.T0104",
-    "parent_technique": "AML.T0115"
+    "parent_technique": "AML.T0115",
+    "superseded_stix_id": "attack-pattern--04842d98-bb69-586e-9765-6ff1f56ef722"
+  },
+  "AML.T0091.001": {
+    "id": "AML.T0091.001",
+    "name": "Use Alternate Authentication Material: Web Session Cookie",
+    "tactic": "lateral-movement",
+    "description": "Adversaries may use stolen web session cookies to authenticate to AI services and applications without needing the account's credentials or completing multi-factor authentication.",
+    "is_subtechnique": true,
+    "parent_technique": "AML.T0091",
+    "reference_url": "https://atlas.mitre.org/techniques/AML.T0091.001",
+    "stix_id": "attack-pattern--af720af7-083e-5229-9ef1-ac43b6a8f470",
+    "platforms": [
+      "ATLAS"
+    ],
+    "last_verified": "2026-08-08"
+  },
+  "AML.T0113": {
+    "id": "AML.T0113",
+    "name": "Steal Web Session Cookie",
+    "tactic": "Credential Access",
+    "description": "Adversaries may steal web application or service session cookies to gain authenticated access to AI services, bypassing the credential and multi-factor prompts the account is otherwise protected by.",
+    "is_subtechnique": false,
+    "reference_url": "https://atlas.mitre.org/techniques/AML.T0113",
+    "stix_id": "attack-pattern--bd255694-5675-50a3-b03e-c341bebd72f5",
+    "platforms": [
+      "ATLAS"
+    ],
+    "last_verified": "2026-08-08"
+  },
+  "AML.T0114": {
+    "id": "AML.T0114",
+    "name": "AI Service Web Interface",
+    "tactic": "Command and Control",
+    "description": "Adversaries may communicate with compromised systems by driving the web interface of a public AI assistant as a command-and-control relay — automating a browser or WebView rather than calling the provider's API, so the traffic resembles ordinary interactive use.",
+    "is_subtechnique": false,
+    "reference_url": "https://atlas.mitre.org/techniques/AML.T0114",
+    "stix_id": "attack-pattern--40a17734-3151-5082-a69d-9ec7c7edb5ce",
+    "platforms": [
+      "ATLAS"
+    ],
+    "last_verified": "2026-08-08"
   }
 }

package/data/attack-techniques.json

@@ -7,7 +7,7 @@
     "attack_version_date": "2026-08-05",
     "tactic_split_note": "ATT&CK v19 split Defense Evasion (TA0005) into Stealth (TA0005) and Defense Impairment (TA0112). Entries here record their post-split tactic; entries whose tactic moved carry `tactic_moved_from: \"Defense Evasion\"` for traceability.",
     "detection_strategies_note": "ATT&CK v18 introduced Detection Strategies as first-class objects (691 strategies, 1739 analytics at v18 release). Entries reference applicable strategy IDs (DSxxxx) where the technique has canonical strategy coverage; absence does not imply lack of detection.",
-    "source": "https://attack.mitre.org — MITRE ATT&CK Enterprise + ICS, v19.1 (May 2026). Only techniques currently referenced by shipped exceptd skills and playbooks. The full ATT&CK matrix is intentionally not duplicated here; this is a resolution catalog for cross-reference validation, not a substitute for attack.mitre.org. See `npm run refresh-attack-techniques` (v0.13.0+) for the full corpus.",
+    "source": "https://attack.mitre.org — MITRE ATT&CK Enterprise + ICS, v19.2 (2026-08-05). Only techniques currently referenced by shipped exceptd skills and playbooks. The full ATT&CK matrix is intentionally not duplicated here; this is a resolution catalog for cross-reference validation, not a substitute for attack.mitre.org. See `npm run refresh-attack-techniques` (v0.13.0+) for the full corpus.",
     "tlp": "CLEAR",
     "source_confidence": {
       "scheme": "Admiralty (A-F + 1-6)",