@blamejs/exceptd-skills 0.20.1 → 0.21.1

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (94) hide show
  1. package/CHANGELOG.md +48 -0
  2. package/data/_indexes/_meta.json +50 -50
  3. package/data/_indexes/activity-feed.json +21 -21
  4. package/data/_indexes/catalog-summaries.json +10 -10
  5. package/data/_indexes/chains.json +2 -2
  6. package/data/_indexes/did-ladders.json +1 -1
  7. package/data/_indexes/frequency.json +122 -76
  8. package/data/_indexes/jurisdiction-clocks.json +2 -2
  9. package/data/_indexes/section-offsets.json +654 -654
  10. package/data/_indexes/summary-cards.json +34 -28
  11. package/data/_indexes/theater-fingerprints.json +1 -1
  12. package/data/_indexes/token-budget.json +241 -241
  13. package/data/_indexes/xref.json +34 -14
  14. package/data/atlas-ttps.json +246 -292
  15. package/data/attack-techniques.json +13 -1
  16. package/data/cve-catalog.json +833 -246
  17. package/data/cwe-catalog.json +6 -2
  18. package/data/d3fend-catalog.json +2 -3
  19. package/data/framework-control-gaps.json +479 -293
  20. package/data/global-frameworks.json +12 -12
  21. package/data/playbooks/ai-api.json +5 -5
  22. package/data/playbooks/ai-discovered-cve-triage.json +7 -7
  23. package/data/playbooks/cicd-pipeline-compromise.json +1 -2
  24. package/data/playbooks/cloud-iam-incident.json +11 -11
  25. package/data/playbooks/containers.json +3 -3
  26. package/data/playbooks/cred-stores.json +4 -4
  27. package/data/playbooks/crypto-codebase.json +1 -1
  28. package/data/playbooks/crypto.json +4 -4
  29. package/data/playbooks/hardening.json +3 -3
  30. package/data/playbooks/identity-sso-compromise.json +4 -3
  31. package/data/playbooks/idp-incident.json +14 -14
  32. package/data/playbooks/kernel.json +3 -3
  33. package/data/playbooks/llm-tool-use-exfil.json +1 -1
  34. package/data/playbooks/mcp.json +4 -4
  35. package/data/playbooks/post-quantum-migration.json +10 -10
  36. package/data/playbooks/ransomware.json +3 -3
  37. package/data/playbooks/runtime.json +3 -3
  38. package/data/playbooks/sbom.json +3 -3
  39. package/data/playbooks/secrets.json +7 -7
  40. package/data/playbooks/supply-chain-recovery.json +1 -2
  41. package/data/playbooks/webhook-callback-abuse.json +1 -1
  42. package/data/zeroday-lessons.json +804 -399
  43. package/lib/ttp-mapper.js +1 -1
  44. package/manifest-snapshot.json +23 -17
  45. package/manifest-snapshot.sha256 +1 -1
  46. package/manifest.json +126 -120
  47. package/package.json +2 -2
  48. package/sbom.cdx.json +184 -169
  49. package/scripts/backfill-theater-test.js +10 -10
  50. package/scripts/builders/did-ladders.js +1 -1
  51. package/scripts/builders/theater-fingerprints.js +1 -1
  52. package/scripts/check-atlas-catalog-currency.js +47 -4
  53. package/scripts/check-ism-control-references.js +221 -0
  54. package/scripts/check-test-count.js +9 -3
  55. package/scripts/predeploy.js +9 -0
  56. package/scripts/refresh-upstream-catalogs.js +9 -2
  57. package/scripts/release.js +6 -6
  58. package/scripts/sync-manifest-metadata.js +6 -6
  59. package/skills/ai-attack-surface/skill.md +11 -9
  60. package/skills/ai-c2-detection/skill.md +5 -6
  61. package/skills/ai-risk-management/skill.md +6 -5
  62. package/skills/api-security/skill.md +8 -8
  63. package/skills/attack-surface-pentest/skill.md +1 -1
  64. package/skills/cloud-iam-incident/skill.md +2 -2
  65. package/skills/cloud-security/skill.md +2 -1
  66. package/skills/compliance-theater/skill.md +4 -4
  67. package/skills/coordinated-vuln-disclosure/skill.md +1 -1
  68. package/skills/decompression-dos/skill.md +1 -1
  69. package/skills/dlp-gap-analysis/skill.md +3 -3
  70. package/skills/exploit-scoring/skill.md +3 -3
  71. package/skills/framework-gap-analysis/skill.md +3 -3
  72. package/skills/global-grc/skill.md +11 -11
  73. package/skills/idp-incident-response/skill.md +2 -2
  74. package/skills/incident-response-playbook/skill.md +18 -17
  75. package/skills/kernel-lpe-triage/skill.md +1 -1
  76. package/skills/log-injection-telemetry/skill.md +1 -1
  77. package/skills/mcp-agent-trust/skill.md +5 -4
  78. package/skills/mlops-security/skill.md +5 -5
  79. package/skills/multitenancy-isolation/skill.md +1 -1
  80. package/skills/policy-exception-gen/skill.md +1 -1
  81. package/skills/pqc-first/skill.md +1 -1
  82. package/skills/privacy-consent-ops/skill.md +1 -1
  83. package/skills/rag-pipeline-security/skill.md +1 -1
  84. package/skills/ransomware-response/skill.md +2 -2
  85. package/skills/researcher/skill.md +3 -3
  86. package/skills/sector-financial/skill.md +4 -4
  87. package/skills/sector-healthcare/skill.md +3 -2
  88. package/skills/sector-telecom/skill.md +8 -8
  89. package/skills/security-maturity-tiers/skill.md +8 -8
  90. package/skills/self-update-integrity/skill.md +1 -1
  91. package/skills/skill-update-loop/skill.md +3 -3
  92. package/skills/threat-model-currency/skill.md +6 -6
  93. package/skills/threat-modeling-methodology/skill.md +4 -4
  94. package/skills/zeroday-gap-learn/skill.md +3 -3
package/data/cwe-catalog.json CHANGED
@@ -1783,6 +1783,7 @@
1783
1783
  "CVE-2021-25395",
1784
1784
  "CVE-2022-26904",
1785
1785
  "CVE-2023-36884",
1786
+ "CVE-2025-39964",
1786
1787
  "CVE-2025-62215",
1787
1788
  "CVE-2026-31635",
1788
1789
  "CVE-2026-33825",
@@ -2599,6 +2600,7 @@
2599
2600
  "CVE-2026-42945",
2600
2601
  "CVE-2026-43500",
2601
2602
  "CVE-2026-46300",
2603
+ "CVE-2026-53266",
2602
2604
  "CVE-2026-53362",
2603
2605
  "CVE-2026-87491"
2604
2606
  ],
@@ -3514,7 +3516,8 @@
3514
3516
  "CVE-2025-20352",
3515
3517
  "CVE-2025-22457",
3516
3518
  "CVE-2025-42599",
3517
- "CVE-2025-53521"
3519
+ "CVE-2025-53521",
3520
+ "CVE-2026-7273"
3518
3521
  ],
3519
3522
  "last_verified": "2026-05-18",
3520
3523
  "notes": "Added v0.13.17 KEV bulk-import."
@@ -5038,7 +5041,8 @@
5038
5041
  "CVE-2021-3560",
5039
5042
  "CVE-2023-41992",
5040
5043
  "CVE-2023-41993",
5041
- "CVE-2024-3393"
5044
+ "CVE-2024-3393",
5045
+ "CVE-2025-39682"
5042
5046
  ],
5043
5047
  "last_verified": "2026-05-19",
5044
5048
  "notes": "Bulk-imported v0.13.18 from the canonical MITRE Top 25 + commonly-referenced-class expansion.",
package/data/d3fend-catalog.json CHANGED
@@ -713,8 +713,7 @@
713
713
  "T1005",
714
714
  "T1041",
715
715
  "AML.T0051",
716
- "AML.T0017",
717
- "AML.T0017"
716
+ "AML.T0013"
718
717
  ],
719
718
  "digital_artifacts_addressed": [
720
719
  "Process",
@@ -756,7 +755,7 @@
756
755
  "NIST-AI-RMF-MEASURE-2.5",
757
756
  "ISO-27001-2022-A.8.16"
758
757
  ],
759
- "ai_pipeline_applicability": "Primary detection control for prompt injection (AML.T0051) and model ontology discovery (AML.T0017). Applies natively to AI pipelines — operates at the application layer where ephemeral runtime is irrelevant. Output-side IOPR (classifying AI responses) is more reliable than input-side (prompt classification) given the variety of injection encodings.",
758
+ "ai_pipeline_applicability": "Primary detection control for prompt injection (AML.T0051) and model ontology discovery (AML.T0013). Applies natively to AI pipelines — operates at the application layer where ephemeral runtime is irrelevant. Output-side IOPR (classifying AI responses) is more reliable than input-side (prompt classification) given the variety of injection encodings.",
760
759
  "lag_notes": "NIST AI RMF MEASURE-2.5 recommends 'measurement of AI system trustworthiness characteristics' but is non-prescriptive. No framework requires runtime output safety scoring or input adversarial classification. OWASP LLM Top 10 documents the need; compliance frameworks have not incorporated it.",
761
760
  "last_verified": "2026-05-19",
762
761
  "description_full": "Limiting access to computer input/output (IO) ports to restrict unauthorized devices.",