@blamejs/exceptd-skills 0.20.1 → 0.21.1

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (94) hide show
  1. package/CHANGELOG.md +48 -0
  2. package/data/_indexes/_meta.json +50 -50
  3. package/data/_indexes/activity-feed.json +21 -21
  4. package/data/_indexes/catalog-summaries.json +10 -10
  5. package/data/_indexes/chains.json +2 -2
  6. package/data/_indexes/did-ladders.json +1 -1
  7. package/data/_indexes/frequency.json +122 -76
  8. package/data/_indexes/jurisdiction-clocks.json +2 -2
  9. package/data/_indexes/section-offsets.json +654 -654
  10. package/data/_indexes/summary-cards.json +34 -28
  11. package/data/_indexes/theater-fingerprints.json +1 -1
  12. package/data/_indexes/token-budget.json +241 -241
  13. package/data/_indexes/xref.json +34 -14
  14. package/data/atlas-ttps.json +246 -292
  15. package/data/attack-techniques.json +13 -1
  16. package/data/cve-catalog.json +833 -246
  17. package/data/cwe-catalog.json +6 -2
  18. package/data/d3fend-catalog.json +2 -3
  19. package/data/framework-control-gaps.json +479 -293
  20. package/data/global-frameworks.json +12 -12
  21. package/data/playbooks/ai-api.json +5 -5
  22. package/data/playbooks/ai-discovered-cve-triage.json +7 -7
  23. package/data/playbooks/cicd-pipeline-compromise.json +1 -2
  24. package/data/playbooks/cloud-iam-incident.json +11 -11
  25. package/data/playbooks/containers.json +3 -3
  26. package/data/playbooks/cred-stores.json +4 -4
  27. package/data/playbooks/crypto-codebase.json +1 -1
  28. package/data/playbooks/crypto.json +4 -4
  29. package/data/playbooks/hardening.json +3 -3
  30. package/data/playbooks/identity-sso-compromise.json +4 -3
  31. package/data/playbooks/idp-incident.json +14 -14
  32. package/data/playbooks/kernel.json +3 -3
  33. package/data/playbooks/llm-tool-use-exfil.json +1 -1
  34. package/data/playbooks/mcp.json +4 -4
  35. package/data/playbooks/post-quantum-migration.json +10 -10
  36. package/data/playbooks/ransomware.json +3 -3
  37. package/data/playbooks/runtime.json +3 -3
  38. package/data/playbooks/sbom.json +3 -3
  39. package/data/playbooks/secrets.json +7 -7
  40. package/data/playbooks/supply-chain-recovery.json +1 -2
  41. package/data/playbooks/webhook-callback-abuse.json +1 -1
  42. package/data/zeroday-lessons.json +804 -399
  43. package/lib/ttp-mapper.js +1 -1
  44. package/manifest-snapshot.json +23 -17
  45. package/manifest-snapshot.sha256 +1 -1
  46. package/manifest.json +126 -120
  47. package/package.json +2 -2
  48. package/sbom.cdx.json +184 -169
  49. package/scripts/backfill-theater-test.js +10 -10
  50. package/scripts/builders/did-ladders.js +1 -1
  51. package/scripts/builders/theater-fingerprints.js +1 -1
  52. package/scripts/check-atlas-catalog-currency.js +47 -4
  53. package/scripts/check-ism-control-references.js +221 -0
  54. package/scripts/check-test-count.js +9 -3
  55. package/scripts/predeploy.js +9 -0
  56. package/scripts/refresh-upstream-catalogs.js +9 -2
  57. package/scripts/release.js +6 -6
  58. package/scripts/sync-manifest-metadata.js +6 -6
  59. package/skills/ai-attack-surface/skill.md +11 -9
  60. package/skills/ai-c2-detection/skill.md +5 -6
  61. package/skills/ai-risk-management/skill.md +6 -5
  62. package/skills/api-security/skill.md +8 -8
  63. package/skills/attack-surface-pentest/skill.md +1 -1
  64. package/skills/cloud-iam-incident/skill.md +2 -2
  65. package/skills/cloud-security/skill.md +2 -1
  66. package/skills/compliance-theater/skill.md +4 -4
  67. package/skills/coordinated-vuln-disclosure/skill.md +1 -1
  68. package/skills/decompression-dos/skill.md +1 -1
  69. package/skills/dlp-gap-analysis/skill.md +3 -3
  70. package/skills/exploit-scoring/skill.md +3 -3
  71. package/skills/framework-gap-analysis/skill.md +3 -3
  72. package/skills/global-grc/skill.md +11 -11
  73. package/skills/idp-incident-response/skill.md +2 -2
  74. package/skills/incident-response-playbook/skill.md +18 -17
  75. package/skills/kernel-lpe-triage/skill.md +1 -1
  76. package/skills/log-injection-telemetry/skill.md +1 -1
  77. package/skills/mcp-agent-trust/skill.md +5 -4
  78. package/skills/mlops-security/skill.md +5 -5
  79. package/skills/multitenancy-isolation/skill.md +1 -1
  80. package/skills/policy-exception-gen/skill.md +1 -1
  81. package/skills/pqc-first/skill.md +1 -1
  82. package/skills/privacy-consent-ops/skill.md +1 -1
  83. package/skills/rag-pipeline-security/skill.md +1 -1
  84. package/skills/ransomware-response/skill.md +2 -2
  85. package/skills/researcher/skill.md +3 -3
  86. package/skills/sector-financial/skill.md +4 -4
  87. package/skills/sector-healthcare/skill.md +3 -2
  88. package/skills/sector-telecom/skill.md +8 -8
  89. package/skills/security-maturity-tiers/skill.md +8 -8
  90. package/skills/self-update-integrity/skill.md +1 -1
  91. package/skills/skill-update-loop/skill.md +3 -3
  92. package/skills/threat-model-currency/skill.md +6 -6
  93. package/skills/threat-modeling-methodology/skill.md +4 -4
  94. package/skills/zeroday-gap-learn/skill.md +3 -3
package/data/_indexes/xref.json CHANGED
@@ -849,13 +849,8 @@
849
849
  "UK-CAF-B5": [
850
850
  "sector-telecom"
851
851
  ],
852
- "AU-ISM-1556": [
853
- "decompression-dos",
854
- "log-injection-telemetry",
855
- "multitenancy-isolation",
856
- "privacy-consent-ops",
857
- "sector-telecom",
858
- "self-update-integrity"
852
+ "AU-ISM-1173-Telecom-NMS": [
853
+ "sector-telecom"
859
854
  ],
860
855
  "GSMA-NESAS-Deployment": [
861
856
  "sector-telecom"
@@ -905,7 +900,7 @@
905
900
  "UK-CAF-B2-Cloud-IAM": [
906
901
  "cloud-iam-incident"
907
902
  ],
908
- "AU-ISM-1546-Cloud-Service-Account": [
903
+ "AU-ISM-1685-Cloud-Service-Account": [
909
904
  "cloud-iam-incident"
910
905
  ],
911
906
  "NIST-800-53-IA-5-Federated": [
@@ -922,7 +917,7 @@
922
917
  "UK-CAF-B2-IdP-Tenant": [
923
918
  "idp-incident-response"
924
919
  ],
925
- "AU-ISM-1559-IdP": [
920
+ "AU-ISM-1685-IdP": [
926
921
  "idp-incident-response"
927
922
  ],
928
923
  "NIS2-Art-21-Federated-Identity": [
@@ -963,8 +958,21 @@
963
958
  "NIST-800-53-SR-11": [
964
959
  "self-update-integrity"
965
960
  ],
961
+ "AU-ISM-0298": [
962
+ "self-update-integrity"
963
+ ],
966
964
  "NIST-800-53-AC-3": [
967
965
  "multitenancy-isolation"
966
+ ],
967
+ "AU-ISM-1268": [
968
+ "multitenancy-isolation"
969
+ ],
970
+ "AU-ISM-1240": [
971
+ "decompression-dos",
972
+ "privacy-consent-ops"
973
+ ],
974
+ "AU-ISM-1815": [
975
+ "log-injection-telemetry"
968
976
  ]
969
977
  },
970
978
  "atlas_refs": {
@@ -1008,15 +1016,19 @@
1008
1016
  ],
1009
1017
  "AML.T0016": [
1010
1018
  "ai-attack-surface",
1011
- "mcp-agent-trust"
1019
+ "ai-c2-detection"
1012
1020
  ],
1013
1021
  "AML.T0017": [
1014
1022
  "ai-attack-surface",
1015
- "ai-c2-detection",
1023
+ "ai-risk-management",
1024
+ "cloud-security",
1025
+ "sector-healthcare"
1026
+ ],
1027
+ "AML.T0013": [
1028
+ "ai-attack-surface",
1016
1029
  "ai-risk-management",
1017
1030
  "api-security",
1018
1031
  "cloud-security",
1019
- "dlp-gap-analysis",
1020
1032
  "incident-response-playbook",
1021
1033
  "mlops-security",
1022
1034
  "sector-financial",
@@ -1034,10 +1046,18 @@
1034
1046
  "mcp-agent-trust",
1035
1047
  "mlops-security",
1036
1048
  "ot-ics-security",
1049
+ "sector-telecom",
1037
1050
  "supply-chain-integrity"
1038
1051
  ],
1039
- "AML.T0040": [
1040
- "sector-telecom"
1052
+ "AML.T0053": [
1053
+ "mcp-agent-trust"
1054
+ ],
1055
+ "AML.T0086": [
1056
+ "mcp-agent-trust"
1057
+ ],
1058
+ "AML.T0024": [
1059
+ "dlp-gap-analysis",
1060
+ "incident-response-playbook"
1041
1061
  ]
1042
1062
  },
1043
1063
  "attack_refs": {