@blamejs/exceptd-skills 0.20.1 → 0.21.1

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (94) hide show
  1. package/CHANGELOG.md +48 -0
  2. package/data/_indexes/_meta.json +50 -50
  3. package/data/_indexes/activity-feed.json +21 -21
  4. package/data/_indexes/catalog-summaries.json +10 -10
  5. package/data/_indexes/chains.json +2 -2
  6. package/data/_indexes/did-ladders.json +1 -1
  7. package/data/_indexes/frequency.json +122 -76
  8. package/data/_indexes/jurisdiction-clocks.json +2 -2
  9. package/data/_indexes/section-offsets.json +654 -654
  10. package/data/_indexes/summary-cards.json +34 -28
  11. package/data/_indexes/theater-fingerprints.json +1 -1
  12. package/data/_indexes/token-budget.json +241 -241
  13. package/data/_indexes/xref.json +34 -14
  14. package/data/atlas-ttps.json +246 -292
  15. package/data/attack-techniques.json +13 -1
  16. package/data/cve-catalog.json +833 -246
  17. package/data/cwe-catalog.json +6 -2
  18. package/data/d3fend-catalog.json +2 -3
  19. package/data/framework-control-gaps.json +479 -293
  20. package/data/global-frameworks.json +12 -12
  21. package/data/playbooks/ai-api.json +5 -5
  22. package/data/playbooks/ai-discovered-cve-triage.json +7 -7
  23. package/data/playbooks/cicd-pipeline-compromise.json +1 -2
  24. package/data/playbooks/cloud-iam-incident.json +11 -11
  25. package/data/playbooks/containers.json +3 -3
  26. package/data/playbooks/cred-stores.json +4 -4
  27. package/data/playbooks/crypto-codebase.json +1 -1
  28. package/data/playbooks/crypto.json +4 -4
  29. package/data/playbooks/hardening.json +3 -3
  30. package/data/playbooks/identity-sso-compromise.json +4 -3
  31. package/data/playbooks/idp-incident.json +14 -14
  32. package/data/playbooks/kernel.json +3 -3
  33. package/data/playbooks/llm-tool-use-exfil.json +1 -1
  34. package/data/playbooks/mcp.json +4 -4
  35. package/data/playbooks/post-quantum-migration.json +10 -10
  36. package/data/playbooks/ransomware.json +3 -3
  37. package/data/playbooks/runtime.json +3 -3
  38. package/data/playbooks/sbom.json +3 -3
  39. package/data/playbooks/secrets.json +7 -7
  40. package/data/playbooks/supply-chain-recovery.json +1 -2
  41. package/data/playbooks/webhook-callback-abuse.json +1 -1
  42. package/data/zeroday-lessons.json +804 -399
  43. package/lib/ttp-mapper.js +1 -1
  44. package/manifest-snapshot.json +23 -17
  45. package/manifest-snapshot.sha256 +1 -1
  46. package/manifest.json +126 -120
  47. package/package.json +2 -2
  48. package/sbom.cdx.json +184 -169
  49. package/scripts/backfill-theater-test.js +10 -10
  50. package/scripts/builders/did-ladders.js +1 -1
  51. package/scripts/builders/theater-fingerprints.js +1 -1
  52. package/scripts/check-atlas-catalog-currency.js +47 -4
  53. package/scripts/check-ism-control-references.js +221 -0
  54. package/scripts/check-test-count.js +9 -3
  55. package/scripts/predeploy.js +9 -0
  56. package/scripts/refresh-upstream-catalogs.js +9 -2
  57. package/scripts/release.js +6 -6
  58. package/scripts/sync-manifest-metadata.js +6 -6
  59. package/skills/ai-attack-surface/skill.md +11 -9
  60. package/skills/ai-c2-detection/skill.md +5 -6
  61. package/skills/ai-risk-management/skill.md +6 -5
  62. package/skills/api-security/skill.md +8 -8
  63. package/skills/attack-surface-pentest/skill.md +1 -1
  64. package/skills/cloud-iam-incident/skill.md +2 -2
  65. package/skills/cloud-security/skill.md +2 -1
  66. package/skills/compliance-theater/skill.md +4 -4
  67. package/skills/coordinated-vuln-disclosure/skill.md +1 -1
  68. package/skills/decompression-dos/skill.md +1 -1
  69. package/skills/dlp-gap-analysis/skill.md +3 -3
  70. package/skills/exploit-scoring/skill.md +3 -3
  71. package/skills/framework-gap-analysis/skill.md +3 -3
  72. package/skills/global-grc/skill.md +11 -11
  73. package/skills/idp-incident-response/skill.md +2 -2
  74. package/skills/incident-response-playbook/skill.md +18 -17
  75. package/skills/kernel-lpe-triage/skill.md +1 -1
  76. package/skills/log-injection-telemetry/skill.md +1 -1
  77. package/skills/mcp-agent-trust/skill.md +5 -4
  78. package/skills/mlops-security/skill.md +5 -5
  79. package/skills/multitenancy-isolation/skill.md +1 -1
  80. package/skills/policy-exception-gen/skill.md +1 -1
  81. package/skills/pqc-first/skill.md +1 -1
  82. package/skills/privacy-consent-ops/skill.md +1 -1
  83. package/skills/rag-pipeline-security/skill.md +1 -1
  84. package/skills/ransomware-response/skill.md +2 -2
  85. package/skills/researcher/skill.md +3 -3
  86. package/skills/sector-financial/skill.md +4 -4
  87. package/skills/sector-healthcare/skill.md +3 -2
  88. package/skills/sector-telecom/skill.md +8 -8
  89. package/skills/security-maturity-tiers/skill.md +8 -8
  90. package/skills/self-update-integrity/skill.md +1 -1
  91. package/skills/skill-update-loop/skill.md +3 -3
  92. package/skills/threat-model-currency/skill.md +6 -6
  93. package/skills/threat-modeling-methodology/skill.md +4 -4
  94. package/skills/zeroday-gap-learn/skill.md +3 -3
package/package.json CHANGED
@@ -1,7 +1,7 @@
1
1
  {
2
2
  "name": "@blamejs/exceptd-skills",
3
- "version": "0.20.1",
4
- "description": "AI security skills grounded in mid-2026 threat reality, not stale framework documentation. 51 skills, 11 catalogs (1716 CVEs / 241 CWEs / 794 ATT&CK + ICS / 174 ATLAS / 468 D3FEND / 8889 RFCs), 35 jurisdictions, 10-class catalog gap detector + budget gate, real XML parser + canonical-form diff + content-pattern regression detection, Ed25519-signed.",
3
+ "version": "0.21.1",
4
+ "description": "AI security skills grounded in mid-2026 threat reality, not stale framework documentation. 51 skills, 11 catalogs (1720 CVEs / 241 CWEs / 794 ATT&CK + ICS / 174 ATLAS / 468 D3FEND / 8889 RFCs), 35 jurisdictions, 10-class catalog gap detector + budget gate, real XML parser + canonical-form diff + content-pattern regression detection, Ed25519-signed.",
5
5
  "keywords": [
6
6
  "ai-security",
7
7
  "ai-skills",