@blamejs/exceptd-skills 0.20.1 → 0.21.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (92) hide show
  1. package/CHANGELOG.md +38 -0
  2. package/data/_indexes/_meta.json +47 -47
  3. package/data/_indexes/activity-feed.json +19 -19
  4. package/data/_indexes/catalog-summaries.json +3 -3
  5. package/data/_indexes/chains.json +2 -2
  6. package/data/_indexes/did-ladders.json +1 -1
  7. package/data/_indexes/frequency.json +122 -76
  8. package/data/_indexes/jurisdiction-clocks.json +2 -2
  9. package/data/_indexes/section-offsets.json +654 -654
  10. package/data/_indexes/summary-cards.json +34 -28
  11. package/data/_indexes/theater-fingerprints.json +1 -1
  12. package/data/_indexes/token-budget.json +241 -241
  13. package/data/_indexes/xref.json +34 -14
  14. package/data/atlas-ttps.json +246 -292
  15. package/data/cve-catalog.json +239 -244
  16. package/data/d3fend-catalog.json +2 -3
  17. package/data/framework-control-gaps.json +454 -293
  18. package/data/global-frameworks.json +12 -12
  19. package/data/playbooks/ai-api.json +5 -5
  20. package/data/playbooks/ai-discovered-cve-triage.json +7 -7
  21. package/data/playbooks/cicd-pipeline-compromise.json +1 -2
  22. package/data/playbooks/cloud-iam-incident.json +11 -11
  23. package/data/playbooks/containers.json +3 -3
  24. package/data/playbooks/cred-stores.json +4 -4
  25. package/data/playbooks/crypto-codebase.json +1 -1
  26. package/data/playbooks/crypto.json +4 -4
  27. package/data/playbooks/hardening.json +3 -3
  28. package/data/playbooks/identity-sso-compromise.json +4 -3
  29. package/data/playbooks/idp-incident.json +14 -14
  30. package/data/playbooks/kernel.json +3 -3
  31. package/data/playbooks/llm-tool-use-exfil.json +1 -1
  32. package/data/playbooks/mcp.json +4 -4
  33. package/data/playbooks/post-quantum-migration.json +10 -10
  34. package/data/playbooks/ransomware.json +3 -3
  35. package/data/playbooks/runtime.json +3 -3
  36. package/data/playbooks/sbom.json +3 -3
  37. package/data/playbooks/secrets.json +7 -7
  38. package/data/playbooks/supply-chain-recovery.json +1 -2
  39. package/data/playbooks/webhook-callback-abuse.json +1 -1
  40. package/data/zeroday-lessons.json +391 -396
  41. package/lib/ttp-mapper.js +1 -1
  42. package/manifest-snapshot.json +23 -17
  43. package/manifest-snapshot.sha256 +1 -1
  44. package/manifest.json +126 -120
  45. package/package.json +1 -1
  46. package/sbom.cdx.json +179 -164
  47. package/scripts/backfill-theater-test.js +10 -10
  48. package/scripts/builders/did-ladders.js +1 -1
  49. package/scripts/builders/theater-fingerprints.js +1 -1
  50. package/scripts/check-atlas-catalog-currency.js +47 -4
  51. package/scripts/check-ism-control-references.js +221 -0
  52. package/scripts/check-test-count.js +9 -3
  53. package/scripts/predeploy.js +9 -0
  54. package/scripts/refresh-upstream-catalogs.js +9 -2
  55. package/scripts/release.js +6 -6
  56. package/scripts/sync-manifest-metadata.js +6 -6
  57. package/skills/ai-attack-surface/skill.md +11 -9
  58. package/skills/ai-c2-detection/skill.md +5 -6
  59. package/skills/ai-risk-management/skill.md +6 -5
  60. package/skills/api-security/skill.md +8 -8
  61. package/skills/attack-surface-pentest/skill.md +1 -1
  62. package/skills/cloud-iam-incident/skill.md +2 -2
  63. package/skills/cloud-security/skill.md +2 -1
  64. package/skills/compliance-theater/skill.md +4 -4
  65. package/skills/coordinated-vuln-disclosure/skill.md +1 -1
  66. package/skills/decompression-dos/skill.md +1 -1
  67. package/skills/dlp-gap-analysis/skill.md +3 -3
  68. package/skills/exploit-scoring/skill.md +3 -3
  69. package/skills/framework-gap-analysis/skill.md +3 -3
  70. package/skills/global-grc/skill.md +11 -11
  71. package/skills/idp-incident-response/skill.md +2 -2
  72. package/skills/incident-response-playbook/skill.md +18 -17
  73. package/skills/kernel-lpe-triage/skill.md +1 -1
  74. package/skills/log-injection-telemetry/skill.md +1 -1
  75. package/skills/mcp-agent-trust/skill.md +5 -4
  76. package/skills/mlops-security/skill.md +5 -5
  77. package/skills/multitenancy-isolation/skill.md +1 -1
  78. package/skills/policy-exception-gen/skill.md +1 -1
  79. package/skills/pqc-first/skill.md +1 -1
  80. package/skills/privacy-consent-ops/skill.md +1 -1
  81. package/skills/rag-pipeline-security/skill.md +1 -1
  82. package/skills/ransomware-response/skill.md +2 -2
  83. package/skills/researcher/skill.md +3 -3
  84. package/skills/sector-financial/skill.md +4 -4
  85. package/skills/sector-healthcare/skill.md +3 -2
  86. package/skills/sector-telecom/skill.md +8 -8
  87. package/skills/security-maturity-tiers/skill.md +8 -8
  88. package/skills/self-update-integrity/skill.md +1 -1
  89. package/skills/skill-update-loop/skill.md +3 -3
  90. package/skills/threat-model-currency/skill.md +6 -6
  91. package/skills/threat-modeling-methodology/skill.md +4 -4
  92. package/skills/zeroday-gap-learn/skill.md +3 -3
package/package.json CHANGED
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "@blamejs/exceptd-skills",
3
- "version": "0.20.1",
3
+ "version": "0.21.0",
4
4
  "description": "AI security skills grounded in mid-2026 threat reality, not stale framework documentation. 51 skills, 11 catalogs (1716 CVEs / 241 CWEs / 794 ATT&CK + ICS / 174 ATLAS / 468 D3FEND / 8889 RFCs), 35 jurisdictions, 10-class catalog gap detector + budget gate, real XML parser + canonical-form diff + content-pattern regression detection, Ed25519-signed.",
5
5
  "keywords": [
6
6
  "ai-security",