@blamejs/exceptd-skills 0.20.1 → 0.21.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (92) hide show
  1. package/CHANGELOG.md +38 -0
  2. package/data/_indexes/_meta.json +47 -47
  3. package/data/_indexes/activity-feed.json +19 -19
  4. package/data/_indexes/catalog-summaries.json +3 -3
  5. package/data/_indexes/chains.json +2 -2
  6. package/data/_indexes/did-ladders.json +1 -1
  7. package/data/_indexes/frequency.json +122 -76
  8. package/data/_indexes/jurisdiction-clocks.json +2 -2
  9. package/data/_indexes/section-offsets.json +654 -654
  10. package/data/_indexes/summary-cards.json +34 -28
  11. package/data/_indexes/theater-fingerprints.json +1 -1
  12. package/data/_indexes/token-budget.json +241 -241
  13. package/data/_indexes/xref.json +34 -14
  14. package/data/atlas-ttps.json +246 -292
  15. package/data/cve-catalog.json +239 -244
  16. package/data/d3fend-catalog.json +2 -3
  17. package/data/framework-control-gaps.json +454 -293
  18. package/data/global-frameworks.json +12 -12
  19. package/data/playbooks/ai-api.json +5 -5
  20. package/data/playbooks/ai-discovered-cve-triage.json +7 -7
  21. package/data/playbooks/cicd-pipeline-compromise.json +1 -2
  22. package/data/playbooks/cloud-iam-incident.json +11 -11
  23. package/data/playbooks/containers.json +3 -3
  24. package/data/playbooks/cred-stores.json +4 -4
  25. package/data/playbooks/crypto-codebase.json +1 -1
  26. package/data/playbooks/crypto.json +4 -4
  27. package/data/playbooks/hardening.json +3 -3
  28. package/data/playbooks/identity-sso-compromise.json +4 -3
  29. package/data/playbooks/idp-incident.json +14 -14
  30. package/data/playbooks/kernel.json +3 -3
  31. package/data/playbooks/llm-tool-use-exfil.json +1 -1
  32. package/data/playbooks/mcp.json +4 -4
  33. package/data/playbooks/post-quantum-migration.json +10 -10
  34. package/data/playbooks/ransomware.json +3 -3
  35. package/data/playbooks/runtime.json +3 -3
  36. package/data/playbooks/sbom.json +3 -3
  37. package/data/playbooks/secrets.json +7 -7
  38. package/data/playbooks/supply-chain-recovery.json +1 -2
  39. package/data/playbooks/webhook-callback-abuse.json +1 -1
  40. package/data/zeroday-lessons.json +391 -396
  41. package/lib/ttp-mapper.js +1 -1
  42. package/manifest-snapshot.json +23 -17
  43. package/manifest-snapshot.sha256 +1 -1
  44. package/manifest.json +126 -120
  45. package/package.json +1 -1
  46. package/sbom.cdx.json +179 -164
  47. package/scripts/backfill-theater-test.js +10 -10
  48. package/scripts/builders/did-ladders.js +1 -1
  49. package/scripts/builders/theater-fingerprints.js +1 -1
  50. package/scripts/check-atlas-catalog-currency.js +47 -4
  51. package/scripts/check-ism-control-references.js +221 -0
  52. package/scripts/check-test-count.js +9 -3
  53. package/scripts/predeploy.js +9 -0
  54. package/scripts/refresh-upstream-catalogs.js +9 -2
  55. package/scripts/release.js +6 -6
  56. package/scripts/sync-manifest-metadata.js +6 -6
  57. package/skills/ai-attack-surface/skill.md +11 -9
  58. package/skills/ai-c2-detection/skill.md +5 -6
  59. package/skills/ai-risk-management/skill.md +6 -5
  60. package/skills/api-security/skill.md +8 -8
  61. package/skills/attack-surface-pentest/skill.md +1 -1
  62. package/skills/cloud-iam-incident/skill.md +2 -2
  63. package/skills/cloud-security/skill.md +2 -1
  64. package/skills/compliance-theater/skill.md +4 -4
  65. package/skills/coordinated-vuln-disclosure/skill.md +1 -1
  66. package/skills/decompression-dos/skill.md +1 -1
  67. package/skills/dlp-gap-analysis/skill.md +3 -3
  68. package/skills/exploit-scoring/skill.md +3 -3
  69. package/skills/framework-gap-analysis/skill.md +3 -3
  70. package/skills/global-grc/skill.md +11 -11
  71. package/skills/idp-incident-response/skill.md +2 -2
  72. package/skills/incident-response-playbook/skill.md +18 -17
  73. package/skills/kernel-lpe-triage/skill.md +1 -1
  74. package/skills/log-injection-telemetry/skill.md +1 -1
  75. package/skills/mcp-agent-trust/skill.md +5 -4
  76. package/skills/mlops-security/skill.md +5 -5
  77. package/skills/multitenancy-isolation/skill.md +1 -1
  78. package/skills/policy-exception-gen/skill.md +1 -1
  79. package/skills/pqc-first/skill.md +1 -1
  80. package/skills/privacy-consent-ops/skill.md +1 -1
  81. package/skills/rag-pipeline-security/skill.md +1 -1
  82. package/skills/ransomware-response/skill.md +2 -2
  83. package/skills/researcher/skill.md +3 -3
  84. package/skills/sector-financial/skill.md +4 -4
  85. package/skills/sector-healthcare/skill.md +3 -2
  86. package/skills/sector-telecom/skill.md +8 -8
  87. package/skills/security-maturity-tiers/skill.md +8 -8
  88. package/skills/self-update-integrity/skill.md +1 -1
  89. package/skills/skill-update-loop/skill.md +3 -3
  90. package/skills/threat-model-currency/skill.md +6 -6
  91. package/skills/threat-modeling-methodology/skill.md +4 -4
  92. package/skills/zeroday-gap-learn/skill.md +3 -3
package/data/d3fend-catalog.json CHANGED
@@ -713,8 +713,7 @@
713
713
  "T1005",
714
714
  "T1041",
715
715
  "AML.T0051",
716
- "AML.T0017",
717
- "AML.T0017"
716
+ "AML.T0013"
718
717
  ],
719
718
  "digital_artifacts_addressed": [
720
719
  "Process",
@@ -756,7 +755,7 @@
756
755
  "NIST-AI-RMF-MEASURE-2.5",
757
756
  "ISO-27001-2022-A.8.16"
758
757
  ],
759
- "ai_pipeline_applicability": "Primary detection control for prompt injection (AML.T0051) and model ontology discovery (AML.T0017). Applies natively to AI pipelines — operates at the application layer where ephemeral runtime is irrelevant. Output-side IOPR (classifying AI responses) is more reliable than input-side (prompt classification) given the variety of injection encodings.",
758
+ "ai_pipeline_applicability": "Primary detection control for prompt injection (AML.T0051) and model ontology discovery (AML.T0013). Applies natively to AI pipelines — operates at the application layer where ephemeral runtime is irrelevant. Output-side IOPR (classifying AI responses) is more reliable than input-side (prompt classification) given the variety of injection encodings.",
760
759
  "lag_notes": "NIST AI RMF MEASURE-2.5 recommends 'measurement of AI system trustworthiness characteristics' but is non-prescriptive. No framework requires runtime output safety scoring or input adversarial classification. OWASP LLM Top 10 documents the need; compliance frameworks have not incorporated it.",
761
760
  "last_verified": "2026-05-19",
762
761
  "description_full": "Limiting access to computer input/output (IO) ports to restrict unauthorized devices.",