npm - @blamejs/exceptd-skills - Versions diffs - 0.19.39 → 0.20.0 - Mend

@blamejs/exceptd-skills 0.19.39 → 0.20.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (60) hide show

package/AGENTS.md +3 -3
package/ARCHITECTURE.md +3 -3
package/CHANGELOG.md +12 -0
package/CONTEXT.md +1 -1
package/README.md +4 -4
package/data/_indexes/_meta.json +39 -39
package/data/_indexes/activity-feed.json +122 -122
package/data/_indexes/catalog-summaries.json +2 -2
package/data/_indexes/chains.json +2866 -2866
package/data/_indexes/currency.json +66 -66
package/data/_indexes/recipes.json +1 -1
package/data/_indexes/section-offsets.json +231 -231
package/data/_indexes/summary-cards.json +34 -34
package/data/_indexes/token-budget.json +100 -100
package/data/atlas-ttps.json +34 -34
package/data/framework-control-gaps.json +3 -3
package/data/playbooks/mcp.json +1 -1
package/data/playbooks/sbom.json +1 -1
package/manifest-snapshot.json +2 -2
package/manifest-snapshot.sha256 +1 -1
package/manifest.json +122 -122
package/package.json +2 -2
package/sbom.cdx.json +121 -106
package/scripts/builders/catalog-summaries.js +1 -1
package/scripts/builders/recipes.js +1 -1
package/scripts/check-atlas-catalog-currency.js +256 -0
package/scripts/predeploy.js +11 -0
package/skills/age-gates-child-safety/skill.md +3 -3
package/skills/ai-attack-surface/skill.md +10 -10
package/skills/ai-c2-detection/skill.md +5 -5
package/skills/api-security/skill.md +2 -2
package/skills/attack-surface-pentest/skill.md +6 -6
package/skills/cloud-security/skill.md +3 -3
package/skills/compliance-theater/skill.md +8 -8
package/skills/container-runtime-security/skill.md +3 -3
package/skills/coordinated-vuln-disclosure/skill.md +2 -2
package/skills/dlp-gap-analysis/skill.md +5 -5
package/skills/exploit-scoring/skill.md +3 -3
package/skills/framework-gap-analysis/skill.md +7 -7
package/skills/fuzz-testing-strategy/skill.md +2 -2
package/skills/global-grc/skill.md +3 -3
package/skills/incident-response-playbook/skill.md +2 -2
package/skills/mcp-agent-trust/skill.md +3 -3
package/skills/mlops-security/skill.md +4 -4
package/skills/ot-ics-security/skill.md +3 -3
package/skills/policy-exception-gen/skill.md +5 -5
package/skills/rag-pipeline-security/skill.md +4 -4
package/skills/ransomware-response/skill.md +2 -2
package/skills/researcher/skill.md +4 -4
package/skills/sector-energy/skill.md +2 -2
package/skills/sector-federal-government/skill.md +2 -2
package/skills/sector-financial/skill.md +4 -4
package/skills/sector-healthcare/skill.md +3 -3
package/skills/security-maturity-tiers/skill.md +4 -4
package/skills/skill-update-loop/skill.md +5 -5
package/skills/supply-chain-integrity/skill.md +4 -4
package/skills/threat-model-currency/skill.md +10 -10
package/skills/threat-modeling-methodology/skill.md +2 -2
package/skills/webapp-security/skill.md +2 -2
package/skills/zeroday-gap-learn/skill.md +3 -3

package/data/_indexes/summary-cards.json CHANGED Viewed

@@ -64,7 +64,7 @@
       ]
     },
     "ai-attack-surface": {
-      "description": "Comprehensive AI/ML attack surface assessment mapped to MITRE ATLAS v2026.07 with explicit framework gap flags",
+      "description": "Comprehensive AI/ML attack surface assessment mapped to MITRE ATLAS v2026.09 with explicit framework gap flags",
       "threat_context_excerpt": "The AI attack surface is not speculative. It is actively exploited. The following are confirmed, documented threats as of mid-2026.",
       "produces": "The assessment produces a structured AI Attack Surface Assessment report. The shape below is consumed downstream by `mcp-agent-trust` (which converts the MCP Trust Assessment section into per-server policy), by `rag-pipeline-security` (which picks up any RAG-pipeline entries from the Surface Inventory), and by `incident-response-playbook` (which scopes IR against the prompt-injection and AI-C2 exposure bands). CSAF-style auditor evidence bundles consume the Framework Gaps and ATLAS TTP Coverage Gaps sections verbatim — preserve the framework-control IDs as cited.\n\n```\n## AI Attack Surface Asse ...",
       "key_xrefs": {
@@ -119,7 +119,7 @@
       "cwe_count": 3,
       "d3fend_count": 5,
       "rfc_count": 0,
-      "last_threat_review": "2026-06-10",
+      "last_threat_review": "2026-09-18",
       "path": "skills/ai-attack-surface/skill.md",
       "handoff_targets": []
     },
@@ -186,7 +186,7 @@
       "cwe_count": 8,
       "d3fend_count": 6,
       "rfc_count": 7,
-      "last_threat_review": "2026-06-10",
+      "last_threat_review": "2026-09-18",
       "path": "skills/mcp-agent-trust/skill.md",
       "handoff_targets": [
         "attack-surface-pentest",
@@ -216,7 +216,7 @@
       "cwe_count": 0,
       "d3fend_count": 0,
       "rfc_count": 0,
-      "last_threat_review": "2026-06-10",
+      "last_threat_review": "2026-09-18",
       "path": "skills/framework-gap-analysis/skill.md",
       "handoff_targets": []
     },
@@ -245,7 +245,7 @@
       "cwe_count": 0,
       "d3fend_count": 0,
       "rfc_count": 0,
-      "last_threat_review": "2026-06-10",
+      "last_threat_review": "2026-09-18",
       "path": "skills/compliance-theater/skill.md",
       "handoff_targets": []
     },
@@ -272,7 +272,7 @@
       "cwe_count": 0,
       "d3fend_count": 0,
       "rfc_count": 0,
-      "last_threat_review": "2026-06-10",
+      "last_threat_review": "2026-09-18",
       "path": "skills/exploit-scoring/skill.md",
       "handoff_targets": []
     },
@@ -320,7 +320,7 @@
       "cwe_count": 2,
       "d3fend_count": 5,
       "rfc_count": 0,
-      "last_threat_review": "2026-06-10",
+      "last_threat_review": "2026-09-18",
       "path": "skills/rag-pipeline-security/skill.md",
       "handoff_targets": [
         "ai-attack-surface",
@@ -382,7 +382,7 @@
       "cwe_count": 1,
       "d3fend_count": 7,
       "rfc_count": 6,
-      "last_threat_review": "2026-06-10",
+      "last_threat_review": "2026-09-18",
       "path": "skills/ai-c2-detection/skill.md",
       "handoff_targets": [
         "attack-surface-pentest",
@@ -414,7 +414,7 @@
       "cwe_count": 1,
       "d3fend_count": 0,
       "rfc_count": 0,
-      "last_threat_review": "2026-06-10",
+      "last_threat_review": "2026-09-18",
       "path": "skills/policy-exception-gen/skill.md",
       "handoff_targets": []
     },
@@ -438,7 +438,7 @@
       "cwe_count": 0,
       "d3fend_count": 0,
       "rfc_count": 0,
-      "last_threat_review": "2026-06-10",
+      "last_threat_review": "2026-09-18",
       "path": "skills/threat-model-currency/skill.md",
       "handoff_targets": []
     },
@@ -476,7 +476,7 @@
       "cwe_count": 0,
       "d3fend_count": 13,
       "rfc_count": 0,
-      "last_threat_review": "2026-08-05",
+      "last_threat_review": "2026-09-09",
       "path": "skills/global-grc/skill.md",
       "handoff_targets": []
     },
@@ -500,7 +500,7 @@
       "cwe_count": 0,
       "d3fend_count": 0,
       "rfc_count": 0,
-      "last_threat_review": "2026-06-10",
+      "last_threat_review": "2026-09-18",
       "path": "skills/zeroday-gap-learn/skill.md",
       "handoff_targets": []
     },
@@ -566,7 +566,7 @@
       "cwe_count": 0,
       "d3fend_count": 0,
       "rfc_count": 0,
-      "last_threat_review": "2026-06-10",
+      "last_threat_review": "2026-09-18",
       "path": "skills/skill-update-loop/skill.md",
       "handoff_targets": []
     },
@@ -608,7 +608,7 @@
       "cwe_count": 1,
       "d3fend_count": 13,
       "rfc_count": 1,
-      "last_threat_review": "2026-08-05",
+      "last_threat_review": "2026-09-18",
       "path": "skills/security-maturity-tiers/skill.md",
       "handoff_targets": []
     },
@@ -632,7 +632,7 @@
       "cwe_count": 0,
       "d3fend_count": 0,
       "rfc_count": 0,
-      "last_threat_review": "2026-05-11",
+      "last_threat_review": "2026-09-09",
       "path": "skills/researcher/skill.md",
       "handoff_targets": []
     },
@@ -689,7 +689,7 @@
       "cwe_count": 11,
       "d3fend_count": 3,
       "rfc_count": 0,
-      "last_threat_review": "2026-06-10",
+      "last_threat_review": "2026-09-18",
       "path": "skills/attack-surface-pentest/skill.md",
       "handoff_targets": []
     },
@@ -732,7 +732,7 @@
       "cwe_count": 6,
       "d3fend_count": 3,
       "rfc_count": 0,
-      "last_threat_review": "2026-06-10",
+      "last_threat_review": "2026-09-18",
       "path": "skills/fuzz-testing-strategy/skill.md",
       "handoff_targets": []
     },
@@ -787,7 +787,7 @@
       "cwe_count": 2,
       "d3fend_count": 5,
       "rfc_count": 2,
-      "last_threat_review": "2026-06-10",
+      "last_threat_review": "2026-09-18",
       "path": "skills/dlp-gap-analysis/skill.md",
       "handoff_targets": []
     },
@@ -844,7 +844,7 @@
       "cwe_count": 5,
       "d3fend_count": 3,
       "rfc_count": 1,
-      "last_threat_review": "2026-06-10",
+      "last_threat_review": "2026-09-18",
       "path": "skills/supply-chain-integrity/skill.md",
       "handoff_targets": []
     },
@@ -995,7 +995,7 @@
       "cwe_count": 4,
       "d3fend_count": 0,
       "rfc_count": 0,
-      "last_threat_review": "2026-06-10",
+      "last_threat_review": "2026-09-18",
       "path": "skills/ot-ics-security/skill.md",
       "handoff_targets": [
         "ai-attack-surface",
@@ -1045,7 +1045,7 @@
       "cwe_count": 1,
       "d3fend_count": 0,
       "rfc_count": 4,
-      "last_threat_review": "2026-06-10",
+      "last_threat_review": "2026-09-18",
       "path": "skills/coordinated-vuln-disclosure/skill.md",
       "handoff_targets": [
         "attack-surface-pentest",
@@ -1087,7 +1087,7 @@
       "cwe_count": 0,
       "d3fend_count": 0,
       "rfc_count": 0,
-      "last_threat_review": "2026-06-10",
+      "last_threat_review": "2026-09-18",
       "path": "skills/threat-modeling-methodology/skill.md",
       "handoff_targets": [
         "ai-attack-surface",
@@ -1163,7 +1163,7 @@
       "cwe_count": 17,
       "d3fend_count": 5,
       "rfc_count": 4,
-      "last_threat_review": "2026-06-10",
+      "last_threat_review": "2026-09-18",
       "path": "skills/webapp-security/skill.md",
       "handoff_targets": [
         "ai-attack-surface",
@@ -1276,7 +1276,7 @@
       "cwe_count": 4,
       "d3fend_count": 3,
       "rfc_count": 2,
-      "last_threat_review": "2026-06-10",
+      "last_threat_review": "2026-09-18",
       "path": "skills/sector-healthcare/skill.md",
       "handoff_targets": [
         "ai-attack-surface",
@@ -1345,7 +1345,7 @@
       "cwe_count": 5,
       "d3fend_count": 4,
       "rfc_count": 4,
-      "last_threat_review": "2026-06-10",
+      "last_threat_review": "2026-09-18",
       "path": "skills/sector-financial/skill.md",
       "handoff_targets": [
         "ai-attack-surface",
@@ -1404,7 +1404,7 @@
       "cwe_count": 3,
       "d3fend_count": 3,
       "rfc_count": 2,
-      "last_threat_review": "2026-06-10",
+      "last_threat_review": "2026-09-18",
       "path": "skills/sector-federal-government/skill.md",
       "handoff_targets": [
         "ai-attack-surface",
@@ -1462,7 +1462,7 @@
       "cwe_count": 4,
       "d3fend_count": 5,
       "rfc_count": 0,
-      "last_threat_review": "2026-06-10",
+      "last_threat_review": "2026-09-18",
       "path": "skills/sector-energy/skill.md",
       "handoff_targets": [
         "ai-attack-surface",
@@ -1593,7 +1593,7 @@
       "cwe_count": 9,
       "d3fend_count": 5,
       "rfc_count": 7,
-      "last_threat_review": "2026-06-10",
+      "last_threat_review": "2026-09-18",
       "path": "skills/api-security/skill.md",
       "handoff_targets": [
         "ai-c2-detection",
@@ -1658,7 +1658,7 @@
       "cwe_count": 6,
       "d3fend_count": 5,
       "rfc_count": 4,
-      "last_threat_review": "2026-06-10",
+      "last_threat_review": "2026-09-18",
       "path": "skills/cloud-security/skill.md",
       "handoff_targets": [
         "ai-c2-detection",
@@ -1725,7 +1725,7 @@
       "cwe_count": 5,
       "d3fend_count": 6,
       "rfc_count": 2,
-      "last_threat_review": "2026-06-10",
+      "last_threat_review": "2026-09-18",
       "path": "skills/container-runtime-security/skill.md",
       "handoff_targets": [
         "ai-attack-surface",
@@ -1796,7 +1796,7 @@
       "cwe_count": 4,
       "d3fend_count": 3,
       "rfc_count": 1,
-      "last_threat_review": "2026-06-10",
+      "last_threat_review": "2026-09-18",
       "path": "skills/mlops-security/skill.md",
       "handoff_targets": [
         "ai-attack-surface",
@@ -1853,7 +1853,7 @@
       "cwe_count": 0,
       "d3fend_count": 4,
       "rfc_count": 3,
-      "last_threat_review": "2026-06-10",
+      "last_threat_review": "2026-09-18",
       "path": "skills/incident-response-playbook/skill.md",
       "handoff_targets": [
         "ai-attack-surface",
@@ -1915,7 +1915,7 @@
       "cwe_count": 2,
       "d3fend_count": 4,
       "rfc_count": 0,
-      "last_threat_review": "2026-06-10",
+      "last_threat_review": "2026-09-18",
       "path": "skills/ransomware-response/skill.md",
       "handoff_targets": [
         "compliance-theater",
@@ -2022,7 +2022,7 @@
       "cwe_count": 3,
       "d3fend_count": 3,
       "rfc_count": 0,
-      "last_threat_review": "2026-06-10",
+      "last_threat_review": "2026-09-18",
       "path": "skills/age-gates-child-safety/skill.md",
       "handoff_targets": [
         "ai-attack-surface",