@blamejs/exceptd-skills 0.21.13 → 0.21.15

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (33) hide show
  1. package/CHANGELOG.md +10 -0
  2. package/data/_indexes/_meta.json +23 -23
  3. package/data/_indexes/activity-feed.json +94 -94
  4. package/data/_indexes/catalog-summaries.json +6 -6
  5. package/data/_indexes/chains.json +2 -2
  6. package/data/_indexes/currency.json +28 -28
  7. package/data/_indexes/section-offsets.json +200 -200
  8. package/data/_indexes/summary-cards.json +14 -14
  9. package/data/_indexes/token-budget.json +99 -99
  10. package/data/attack-techniques.json +3 -1
  11. package/data/cve-catalog.json +107 -1
  12. package/data/cwe-catalog.json +2 -1
  13. package/data/framework-control-gaps.json +7 -1
  14. package/data/zeroday-lessons.json +99 -2
  15. package/manifest.json +81 -81
  16. package/package.json +2 -2
  17. package/sbom.cdx.json +69 -54
  18. package/scripts/check-skill-catalog-facts.js +304 -0
  19. package/scripts/predeploy.js +8 -0
  20. package/skills/ai-attack-surface/skill.md +2 -2
  21. package/skills/cloud-iam-incident/skill.md +6 -6
  22. package/skills/compliance-theater/skill.md +6 -6
  23. package/skills/container-runtime-security/skill.md +2 -2
  24. package/skills/exploit-scoring/skill.md +16 -14
  25. package/skills/framework-gap-analysis/skill.md +5 -5
  26. package/skills/idp-incident-response/skill.md +4 -4
  27. package/skills/kernel-lpe-triage/skill.md +15 -15
  28. package/skills/policy-exception-gen/skill.md +4 -4
  29. package/skills/sector-federal-government/skill.md +3 -3
  30. package/skills/security-maturity-tiers/skill.md +5 -5
  31. package/skills/supply-chain-integrity/skill.md +3 -3
  32. package/skills/threat-model-currency/skill.md +6 -6
  33. package/skills/zeroday-gap-learn/skill.md +8 -8
@@ -53,7 +53,7 @@
53
53
  "cwe_count": 5,
54
54
  "d3fend_count": 6,
55
55
  "rfc_count": 3,
56
- "last_threat_review": "2026-05-15",
56
+ "last_threat_review": "2026-09-28",
57
57
  "path": "skills/kernel-lpe-triage/skill.md",
58
58
  "handoff_targets": [
59
59
  "attack-surface-pentest",
@@ -120,7 +120,7 @@
120
120
  "cwe_count": 3,
121
121
  "d3fend_count": 5,
122
122
  "rfc_count": 0,
123
- "last_threat_review": "2026-09-18",
123
+ "last_threat_review": "2026-09-28",
124
124
  "path": "skills/ai-attack-surface/skill.md",
125
125
  "handoff_targets": []
126
126
  },
@@ -218,7 +218,7 @@
218
218
  "cwe_count": 0,
219
219
  "d3fend_count": 0,
220
220
  "rfc_count": 0,
221
- "last_threat_review": "2026-09-18",
221
+ "last_threat_review": "2026-09-28",
222
222
  "path": "skills/framework-gap-analysis/skill.md",
223
223
  "handoff_targets": []
224
224
  },
@@ -247,7 +247,7 @@
247
247
  "cwe_count": 0,
248
248
  "d3fend_count": 0,
249
249
  "rfc_count": 0,
250
- "last_threat_review": "2026-09-18",
250
+ "last_threat_review": "2026-09-28",
251
251
  "path": "skills/compliance-theater/skill.md",
252
252
  "handoff_targets": []
253
253
  },
@@ -274,7 +274,7 @@
274
274
  "cwe_count": 0,
275
275
  "d3fend_count": 0,
276
276
  "rfc_count": 0,
277
- "last_threat_review": "2026-09-18",
277
+ "last_threat_review": "2026-09-28",
278
278
  "path": "skills/exploit-scoring/skill.md",
279
279
  "handoff_targets": []
280
280
  },
@@ -416,7 +416,7 @@
416
416
  "cwe_count": 1,
417
417
  "d3fend_count": 0,
418
418
  "rfc_count": 0,
419
- "last_threat_review": "2026-09-18",
419
+ "last_threat_review": "2026-09-28",
420
420
  "path": "skills/policy-exception-gen/skill.md",
421
421
  "handoff_targets": []
422
422
  },
@@ -440,7 +440,7 @@
440
440
  "cwe_count": 0,
441
441
  "d3fend_count": 0,
442
442
  "rfc_count": 0,
443
- "last_threat_review": "2026-09-18",
443
+ "last_threat_review": "2026-09-28",
444
444
  "path": "skills/threat-model-currency/skill.md",
445
445
  "handoff_targets": []
446
446
  },
@@ -502,7 +502,7 @@
502
502
  "cwe_count": 0,
503
503
  "d3fend_count": 0,
504
504
  "rfc_count": 0,
505
- "last_threat_review": "2026-09-18",
505
+ "last_threat_review": "2026-09-28",
506
506
  "path": "skills/zeroday-gap-learn/skill.md",
507
507
  "handoff_targets": []
508
508
  },
@@ -610,7 +610,7 @@
610
610
  "cwe_count": 1,
611
611
  "d3fend_count": 13,
612
612
  "rfc_count": 1,
613
- "last_threat_review": "2026-09-18",
613
+ "last_threat_review": "2026-09-28",
614
614
  "path": "skills/security-maturity-tiers/skill.md",
615
615
  "handoff_targets": []
616
616
  },
@@ -846,7 +846,7 @@
846
846
  "cwe_count": 5,
847
847
  "d3fend_count": 3,
848
848
  "rfc_count": 1,
849
- "last_threat_review": "2026-09-18",
849
+ "last_threat_review": "2026-09-28",
850
850
  "path": "skills/supply-chain-integrity/skill.md",
851
851
  "handoff_targets": []
852
852
  },
@@ -1408,7 +1408,7 @@
1408
1408
  "cwe_count": 3,
1409
1409
  "d3fend_count": 3,
1410
1410
  "rfc_count": 2,
1411
- "last_threat_review": "2026-09-18",
1411
+ "last_threat_review": "2026-09-28",
1412
1412
  "path": "skills/sector-federal-government/skill.md",
1413
1413
  "handoff_targets": [
1414
1414
  "ai-attack-surface",
@@ -1730,7 +1730,7 @@
1730
1730
  "cwe_count": 5,
1731
1731
  "d3fend_count": 6,
1732
1732
  "rfc_count": 2,
1733
- "last_threat_review": "2026-09-18",
1733
+ "last_threat_review": "2026-09-28",
1734
1734
  "path": "skills/container-runtime-security/skill.md",
1735
1735
  "handoff_targets": [
1736
1736
  "ai-attack-surface",
@@ -2099,7 +2099,7 @@
2099
2099
  "cwe_count": 6,
2100
2100
  "d3fend_count": 5,
2101
2101
  "rfc_count": 4,
2102
- "last_threat_review": "2026-05-15",
2102
+ "last_threat_review": "2026-09-28",
2103
2103
  "path": "skills/cloud-iam-incident/skill.md",
2104
2104
  "handoff_targets": [
2105
2105
  "ai-attack-surface",
@@ -2170,7 +2170,7 @@
2170
2170
  "cwe_count": 6,
2171
2171
  "d3fend_count": 4,
2172
2172
  "rfc_count": 4,
2173
- "last_threat_review": "2026-05-15",
2173
+ "last_threat_review": "2026-09-28",
2174
2174
  "path": "skills/idp-incident-response/skill.md",
2175
2175
  "handoff_targets": [
2176
2176
  "ai-attack-surface",
@@ -3,23 +3,23 @@
3
3
  "schema_version": "1.0.0",
4
4
  "tokenizer_note": "Character-density approximation: 1 token ≈ 4 chars. This is the canonical rule-of-thumb for OpenAI tokenizers on English+technical text. Claude's tokenizer is typically more efficient on prose; treat this as an upper-bound budget for both. Consumers with stricter precision needs should re-tokenize with their own tokenizer.",
5
5
  "approx_chars_per_token": 4,
6
- "total_chars": 1770568,
7
- "total_approx_tokens": 442647,
6
+ "total_chars": 1771382,
7
+ "total_approx_tokens": 442850,
8
8
  "skill_count": 51
9
9
  },
10
10
  "skills": {
11
11
  "kernel-lpe-triage": {
12
12
  "path": "skills/kernel-lpe-triage/skill.md",
13
- "bytes": 31016,
14
- "chars": 30845,
13
+ "bytes": 31309,
14
+ "chars": 31138,
15
15
  "lines": 397,
16
- "approx_tokens": 7711,
16
+ "approx_tokens": 7785,
17
17
  "approx_chars_per_token": 4,
18
18
  "sections": {
19
19
  "threat-context": {
20
- "bytes": 5569,
21
- "chars": 5521,
22
- "approx_tokens": 1380
20
+ "bytes": 5843,
21
+ "chars": 5795,
22
+ "approx_tokens": 1449
23
23
  },
24
24
  "framework-lag-declaration": {
25
25
  "bytes": 2519,
@@ -32,9 +32,9 @@
32
32
  "approx_tokens": 722
33
33
  },
34
34
  "exploit-availability-matrix": {
35
- "bytes": 885,
36
- "chars": 881,
37
- "approx_tokens": 220
35
+ "bytes": 899,
36
+ "chars": 895,
37
+ "approx_tokens": 224
38
38
  },
39
39
  "compliance-theater-check": {
40
40
  "bytes": 2072,
@@ -47,9 +47,9 @@
47
47
  "approx_tokens": 1324
48
48
  },
49
49
  "output-format": {
50
- "bytes": 2388,
51
- "chars": 2374,
52
- "approx_tokens": 594
50
+ "bytes": 2393,
51
+ "chars": 2379,
52
+ "approx_tokens": 595
53
53
  },
54
54
  "detection-rules": {
55
55
  "bytes": 689,
@@ -70,16 +70,16 @@
70
70
  },
71
71
  "ai-attack-surface": {
72
72
  "path": "skills/ai-attack-surface/skill.md",
73
- "bytes": 29850,
74
- "chars": 29778,
73
+ "bytes": 29855,
74
+ "chars": 29783,
75
75
  "lines": 339,
76
- "approx_tokens": 7445,
76
+ "approx_tokens": 7446,
77
77
  "approx_chars_per_token": 4,
78
78
  "sections": {
79
79
  "threat-context": {
80
- "bytes": 7992,
81
- "chars": 7960,
82
- "approx_tokens": 1990
80
+ "bytes": 7997,
81
+ "chars": 7965,
82
+ "approx_tokens": 1991
83
83
  },
84
84
  "framework-lag-declaration": {
85
85
  "bytes": 6512,
@@ -175,10 +175,10 @@
175
175
  },
176
176
  "framework-gap-analysis": {
177
177
  "path": "skills/framework-gap-analysis/skill.md",
178
- "bytes": 32722,
179
- "chars": 32620,
178
+ "bytes": 32775,
179
+ "chars": 32673,
180
180
  "lines": 410,
181
- "approx_tokens": 8155,
181
+ "approx_tokens": 8168,
182
182
  "approx_chars_per_token": 4,
183
183
  "sections": {
184
184
  "frontmatter-scope": {
@@ -202,9 +202,9 @@
202
202
  "approx_tokens": 540
203
203
  },
204
204
  "exploit-availability-matrix": {
205
- "bytes": 1536,
206
- "chars": 1536,
207
- "approx_tokens": 384
205
+ "bytes": 1589,
206
+ "chars": 1589,
207
+ "approx_tokens": 397
208
208
  },
209
209
  "built-in-gap-catalog": {
210
210
  "bytes": 10679,
@@ -240,10 +240,10 @@
240
240
  },
241
241
  "compliance-theater": {
242
242
  "path": "skills/compliance-theater/skill.md",
243
- "bytes": 38568,
244
- "chars": 38482,
243
+ "bytes": 38622,
244
+ "chars": 38536,
245
245
  "lines": 409,
246
- "approx_tokens": 9621,
246
+ "approx_tokens": 9634,
247
247
  "approx_chars_per_token": 4,
248
248
  "sections": {
249
249
  "frontmatter-scope": {
@@ -267,9 +267,9 @@
267
267
  "approx_tokens": 543
268
268
  },
269
269
  "exploit-availability-matrix": {
270
- "bytes": 2006,
271
- "chars": 2006,
272
- "approx_tokens": 502
270
+ "bytes": 2060,
271
+ "chars": 2060,
272
+ "approx_tokens": 515
273
273
  },
274
274
  "theater-pattern-library": {
275
275
  "bytes": 12737,
@@ -300,10 +300,10 @@
300
300
  },
301
301
  "exploit-scoring": {
302
302
  "path": "skills/exploit-scoring/skill.md",
303
- "bytes": 30291,
304
- "chars": 30107,
305
- "lines": 391,
306
- "approx_tokens": 7527,
303
+ "bytes": 30433,
304
+ "chars": 30249,
305
+ "lines": 393,
306
+ "approx_tokens": 7562,
307
307
  "approx_chars_per_token": 4,
308
308
  "sections": {
309
309
  "frontmatter-scope": {
@@ -327,9 +327,9 @@
327
327
  "approx_tokens": 298
328
328
  },
329
329
  "exploit-availability-matrix": {
330
- "bytes": 1744,
331
- "chars": 1740,
332
- "approx_tokens": 435
330
+ "bytes": 1796,
331
+ "chars": 1792,
332
+ "approx_tokens": 448
333
333
  },
334
334
  "rwep-formula": {
335
335
  "bytes": 2867,
@@ -337,9 +337,9 @@
337
337
  "approx_tokens": 714
338
338
  },
339
339
  "pre-calculated-rwep-scores": {
340
- "bytes": 5716,
341
- "chars": 5675,
342
- "approx_tokens": 1419
340
+ "bytes": 5806,
341
+ "chars": 5765,
342
+ "approx_tokens": 1441
343
343
  },
344
344
  "rwep-vs-cvss-delta-analysis": {
345
345
  "bytes": 1509,
@@ -520,10 +520,10 @@
520
520
  },
521
521
  "policy-exception-gen": {
522
522
  "path": "skills/policy-exception-gen/skill.md",
523
- "bytes": 37044,
524
- "chars": 36932,
523
+ "bytes": 37096,
524
+ "chars": 36984,
525
525
  "lines": 479,
526
- "approx_tokens": 9233,
526
+ "approx_tokens": 9246,
527
527
  "approx_chars_per_token": 4,
528
528
  "sections": {
529
529
  "frontmatter-scope": {
@@ -547,9 +547,9 @@
547
547
  "approx_tokens": 487
548
548
  },
549
549
  "exploit-availability-matrix": {
550
- "bytes": 2024,
551
- "chars": 2010,
552
- "approx_tokens": 503
550
+ "bytes": 2076,
551
+ "chars": 2062,
552
+ "approx_tokens": 516
553
553
  },
554
554
  "exception-template-library": {
555
555
  "bytes": 13218,
@@ -580,10 +580,10 @@
580
580
  },
581
581
  "threat-model-currency": {
582
582
  "path": "skills/threat-model-currency/skill.md",
583
- "bytes": 33334,
584
- "chars": 33154,
583
+ "bytes": 33403,
584
+ "chars": 33223,
585
585
  "lines": 448,
586
- "approx_tokens": 8289,
586
+ "approx_tokens": 8306,
587
587
  "approx_chars_per_token": 4,
588
588
  "sections": {
589
589
  "frontmatter-scope": {
@@ -617,9 +617,9 @@
617
617
  "approx_tokens": 747
618
618
  },
619
619
  "exploit-availability-matrix": {
620
- "bytes": 2353,
621
- "chars": 2335,
622
- "approx_tokens": 584
620
+ "bytes": 2422,
621
+ "chars": 2404,
622
+ "approx_tokens": 601
623
623
  },
624
624
  "compliance-theater-check": {
625
625
  "bytes": 1568,
@@ -720,10 +720,10 @@
720
720
  },
721
721
  "zeroday-gap-learn": {
722
722
  "path": "skills/zeroday-gap-learn/skill.md",
723
- "bytes": 42949,
724
- "chars": 42757,
723
+ "bytes": 43029,
724
+ "chars": 42837,
725
725
  "lines": 477,
726
- "approx_tokens": 10689,
726
+ "approx_tokens": 10709,
727
727
  "approx_chars_per_token": 4,
728
728
  "sections": {
729
729
  "frontmatter-scope": {
@@ -747,9 +747,9 @@
747
747
  "approx_tokens": 294
748
748
  },
749
749
  "exploit-availability-matrix": {
750
- "bytes": 2782,
751
- "chars": 2760,
752
- "approx_tokens": 690
750
+ "bytes": 2857,
751
+ "chars": 2835,
752
+ "approx_tokens": 709
753
753
  },
754
754
  "the-learning-loop": {
755
755
  "bytes": 1417,
@@ -757,9 +757,9 @@
757
757
  "approx_tokens": 343
758
758
  },
759
759
  "pre-run-lessons-encoded-from-documented-zero-days": {
760
- "bytes": 21004,
761
- "chars": 20960,
762
- "approx_tokens": 5240
760
+ "bytes": 21009,
761
+ "chars": 20965,
762
+ "approx_tokens": 5241
763
763
  },
764
764
  "analysis-procedure": {
765
765
  "bytes": 2124,
@@ -945,10 +945,10 @@
945
945
  },
946
946
  "security-maturity-tiers": {
947
947
  "path": "skills/security-maturity-tiers/skill.md",
948
- "bytes": 37417,
949
- "chars": 37219,
948
+ "bytes": 37593,
949
+ "chars": 37399,
950
950
  "lines": 540,
951
- "approx_tokens": 9305,
951
+ "approx_tokens": 9350,
952
952
  "approx_chars_per_token": 4,
953
953
  "sections": {
954
954
  "frontmatter-scope": {
@@ -1027,9 +1027,9 @@
1027
1027
  "approx_tokens": 1033
1028
1028
  },
1029
1029
  "exploit-availability-matrix": {
1030
- "bytes": 2665,
1031
- "chars": 2661,
1032
- "approx_tokens": 665
1030
+ "bytes": 2841,
1031
+ "chars": 2841,
1032
+ "approx_tokens": 710
1033
1033
  }
1034
1034
  }
1035
1035
  },
@@ -1240,10 +1240,10 @@
1240
1240
  },
1241
1241
  "supply-chain-integrity": {
1242
1242
  "path": "skills/supply-chain-integrity/skill.md",
1243
- "bytes": 42369,
1244
- "chars": 42221,
1243
+ "bytes": 42327,
1244
+ "chars": 42181,
1245
1245
  "lines": 330,
1246
- "approx_tokens": 10555,
1246
+ "approx_tokens": 10545,
1247
1247
  "approx_chars_per_token": 4,
1248
1248
  "sections": {
1249
1249
  "threat-context": {
@@ -1262,9 +1262,9 @@
1262
1262
  "approx_tokens": 780
1263
1263
  },
1264
1264
  "exploit-availability-matrix": {
1265
- "bytes": 4515,
1266
- "chars": 4455,
1267
- "approx_tokens": 1114
1265
+ "bytes": 4473,
1266
+ "chars": 4415,
1267
+ "approx_tokens": 1104
1268
1268
  },
1269
1269
  "analysis-procedure": {
1270
1270
  "bytes": 7457,
@@ -1800,10 +1800,10 @@
1800
1800
  },
1801
1801
  "sector-federal-government": {
1802
1802
  "path": "skills/sector-federal-government/skill.md",
1803
- "bytes": 45096,
1804
- "chars": 44921,
1803
+ "bytes": 45058,
1804
+ "chars": 44885,
1805
1805
  "lines": 308,
1806
- "approx_tokens": 11230,
1806
+ "approx_tokens": 11221,
1807
1807
  "approx_chars_per_token": 4,
1808
1808
  "sections": {
1809
1809
  "threat-context": {
@@ -1822,9 +1822,9 @@
1822
1822
  "approx_tokens": 603
1823
1823
  },
1824
1824
  "exploit-availability-matrix": {
1825
- "bytes": 6248,
1826
- "chars": 6166,
1827
- "approx_tokens": 1542
1825
+ "bytes": 6210,
1826
+ "chars": 6130,
1827
+ "approx_tokens": 1533
1828
1828
  },
1829
1829
  "analysis-procedure": {
1830
1830
  "bytes": 8040,
@@ -2075,10 +2075,10 @@
2075
2075
  },
2076
2076
  "container-runtime-security": {
2077
2077
  "path": "skills/container-runtime-security/skill.md",
2078
- "bytes": 49704,
2079
- "chars": 49542,
2078
+ "bytes": 49677,
2079
+ "chars": 49515,
2080
2080
  "lines": 385,
2081
- "approx_tokens": 12386,
2081
+ "approx_tokens": 12379,
2082
2082
  "approx_chars_per_token": 4,
2083
2083
  "sections": {
2084
2084
  "threat-context": {
@@ -2097,9 +2097,9 @@
2097
2097
  "approx_tokens": 1117
2098
2098
  },
2099
2099
  "exploit-availability-matrix": {
2100
- "bytes": 4003,
2101
- "chars": 3953,
2102
- "approx_tokens": 988
2100
+ "bytes": 3976,
2101
+ "chars": 3926,
2102
+ "approx_tokens": 982
2103
2103
  },
2104
2104
  "analysis-procedure": {
2105
2105
  "bytes": 10775,
@@ -2405,10 +2405,10 @@
2405
2405
  },
2406
2406
  "cloud-iam-incident": {
2407
2407
  "path": "skills/cloud-iam-incident/skill.md",
2408
- "bytes": 44735,
2409
- "chars": 44579,
2408
+ "bytes": 44754,
2409
+ "chars": 44598,
2410
2410
  "lines": 416,
2411
- "approx_tokens": 11145,
2411
+ "approx_tokens": 11150,
2412
2412
  "approx_chars_per_token": 4,
2413
2413
  "sections": {
2414
2414
  "threat-context": {
@@ -2427,9 +2427,9 @@
2427
2427
  "approx_tokens": 1129
2428
2428
  },
2429
2429
  "exploit-availability-matrix": {
2430
- "bytes": 3372,
2431
- "chars": 3368,
2432
- "approx_tokens": 842
2430
+ "bytes": 3391,
2431
+ "chars": 3387,
2432
+ "approx_tokens": 847
2433
2433
  },
2434
2434
  "analysis-procedure": {
2435
2435
  "bytes": 7620,
@@ -2460,10 +2460,10 @@
2460
2460
  },
2461
2461
  "idp-incident-response": {
2462
2462
  "path": "skills/idp-incident-response/skill.md",
2463
- "bytes": 46150,
2464
- "chars": 46020,
2463
+ "bytes": 46116,
2464
+ "chars": 45990,
2465
2465
  "lines": 350,
2466
- "approx_tokens": 11505,
2466
+ "approx_tokens": 11498,
2467
2467
  "approx_chars_per_token": 4,
2468
2468
  "sections": {
2469
2469
  "threat-context": {
@@ -2482,9 +2482,9 @@
2482
2482
  "approx_tokens": 1017
2483
2483
  },
2484
2484
  "exploit-availability-matrix": {
2485
- "bytes": 3690,
2486
- "chars": 3672,
2487
- "approx_tokens": 918
2485
+ "bytes": 3656,
2486
+ "chars": 3642,
2487
+ "approx_tokens": 911
2488
2488
  },
2489
2489
  "analysis-procedure": {
2490
2490
  "bytes": 7046,
@@ -2653,6 +2653,7 @@
2653
2653
  "CVE-2026-85706",
2654
2654
  "CVE-2026-86060",
2655
2655
  "CVE-2026-86218",
2656
+ "CVE-2026-88772",
2656
2657
  "CVE-2026-9082",
2657
2658
  "CVE-2026-9198",
2658
2659
  "CVE-2026-93952",
@@ -15410,7 +15411,8 @@
15410
15411
  "CVE-2025-39682",
15411
15412
  "CVE-2025-39964",
15412
15413
  "CVE-2026-20349",
15413
- "CVE-2026-67277"
15414
+ "CVE-2026-67277",
15415
+ "CVE-2026-88772"
15414
15416
  ]
15415
15417
  },
15416
15418
  "T1505.001": {