npm - @blamejs/exceptd-skills - Versions diffs - 0.9.1 - Mend

@blamejs/exceptd-skills 0.9.1

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (136) hide show

package/AGENTS.md +232 -0
package/ARCHITECTURE.md +267 -0
package/CHANGELOG.md +616 -0
package/CONTEXT.md +203 -0
package/LICENSE +200 -0
package/NOTICE +82 -0
package/README.md +307 -0
package/SECURITY.md +73 -0
package/agents/README.md +81 -0
package/agents/report-generator.md +156 -0
package/agents/skill-updater.md +102 -0
package/agents/source-validator.md +119 -0
package/agents/threat-researcher.md +149 -0
package/bin/exceptd.js +183 -0
package/data/_indexes/_meta.json +88 -0
package/data/_indexes/activity-feed.json +362 -0
package/data/_indexes/catalog-summaries.json +229 -0
package/data/_indexes/chains.json +7135 -0
package/data/_indexes/currency.json +359 -0
package/data/_indexes/did-ladders.json +451 -0
package/data/_indexes/frequency.json +2072 -0
package/data/_indexes/handoff-dag.json +476 -0
package/data/_indexes/jurisdiction-clocks.json +967 -0
package/data/_indexes/jurisdiction-map.json +536 -0
package/data/_indexes/recipes.json +319 -0
package/data/_indexes/section-offsets.json +3656 -0
package/data/_indexes/stale-content.json +14 -0
package/data/_indexes/summary-cards.json +1736 -0
package/data/_indexes/theater-fingerprints.json +381 -0
package/data/_indexes/token-budget.json +2137 -0
package/data/_indexes/trigger-table.json +1374 -0
package/data/_indexes/xref.json +818 -0
package/data/atlas-ttps.json +282 -0
package/data/cve-catalog.json +496 -0
package/data/cwe-catalog.json +1017 -0
package/data/d3fend-catalog.json +738 -0
package/data/dlp-controls.json +1039 -0
package/data/exploit-availability.json +67 -0
package/data/framework-control-gaps.json +1255 -0
package/data/global-frameworks.json +2913 -0
package/data/rfc-references.json +324 -0
package/data/zeroday-lessons.json +377 -0
package/keys/public.pem +3 -0
package/lib/framework-gap.js +328 -0
package/lib/job-queue.js +195 -0
package/lib/lint-skills.js +536 -0
package/lib/prefetch.js +372 -0
package/lib/refresh-external.js +713 -0
package/lib/schemas/cve-catalog.schema.json +151 -0
package/lib/schemas/manifest.schema.json +106 -0
package/lib/schemas/skill-frontmatter.schema.json +113 -0
package/lib/scoring.js +149 -0
package/lib/sign.js +197 -0
package/lib/ttp-mapper.js +80 -0
package/lib/validate-catalog-meta.js +198 -0
package/lib/validate-cve-catalog.js +213 -0
package/lib/validate-indexes.js +83 -0
package/lib/validate-package.js +162 -0
package/lib/validate-vendor.js +85 -0
package/lib/verify.js +216 -0
package/lib/worker-pool.js +84 -0
package/manifest-snapshot.json +1833 -0
package/manifest.json +2108 -0
package/orchestrator/README.md +124 -0
package/orchestrator/dispatcher.js +140 -0
package/orchestrator/event-bus.js +146 -0
package/orchestrator/index.js +874 -0
package/orchestrator/pipeline.js +201 -0
package/orchestrator/scanner.js +327 -0
package/orchestrator/scheduler.js +137 -0
package/package.json +113 -0
package/sbom.cdx.json +158 -0
package/scripts/audit-cross-skill.js +261 -0
package/scripts/audit-perf.js +160 -0
package/scripts/bootstrap.js +205 -0
package/scripts/build-indexes.js +721 -0
package/scripts/builders/activity-feed.js +79 -0
package/scripts/builders/catalog-summaries.js +67 -0
package/scripts/builders/currency.js +109 -0
package/scripts/builders/cwe-chains.js +105 -0
package/scripts/builders/did-ladders.js +149 -0
package/scripts/builders/frequency.js +89 -0
package/scripts/builders/jurisdiction-clocks.js +126 -0
package/scripts/builders/recipes.js +159 -0
package/scripts/builders/section-offsets.js +162 -0
package/scripts/builders/stale-content.js +171 -0
package/scripts/builders/summary-cards.js +166 -0
package/scripts/builders/theater-fingerprints.js +198 -0
package/scripts/builders/token-budget.js +96 -0
package/scripts/check-manifest-snapshot.js +217 -0
package/scripts/predeploy.js +267 -0
package/scripts/refresh-manifest-snapshot.js +57 -0
package/scripts/refresh-sbom.js +222 -0
package/skills/age-gates-child-safety/skill.md +456 -0
package/skills/ai-attack-surface/skill.md +282 -0
package/skills/ai-c2-detection/skill.md +440 -0
package/skills/ai-risk-management/skill.md +311 -0
package/skills/api-security/skill.md +287 -0
package/skills/attack-surface-pentest/skill.md +381 -0
package/skills/cloud-security/skill.md +384 -0
package/skills/compliance-theater/skill.md +365 -0
package/skills/container-runtime-security/skill.md +379 -0
package/skills/coordinated-vuln-disclosure/skill.md +473 -0
package/skills/defensive-countermeasure-mapping/skill.md +300 -0
package/skills/dlp-gap-analysis/skill.md +337 -0
package/skills/email-security-anti-phishing/skill.md +206 -0
package/skills/exploit-scoring/skill.md +331 -0
package/skills/framework-gap-analysis/skill.md +374 -0
package/skills/fuzz-testing-strategy/skill.md +313 -0
package/skills/global-grc/skill.md +564 -0
package/skills/identity-assurance/skill.md +272 -0
package/skills/incident-response-playbook/skill.md +546 -0
package/skills/kernel-lpe-triage/skill.md +303 -0
package/skills/mcp-agent-trust/skill.md +326 -0
package/skills/mlops-security/skill.md +325 -0
package/skills/ot-ics-security/skill.md +340 -0
package/skills/policy-exception-gen/skill.md +437 -0
package/skills/pqc-first/skill.md +546 -0
package/skills/rag-pipeline-security/skill.md +294 -0
package/skills/researcher/skill.md +310 -0
package/skills/sector-energy/skill.md +409 -0
package/skills/sector-federal-government/skill.md +302 -0
package/skills/sector-financial/skill.md +398 -0
package/skills/sector-healthcare/skill.md +373 -0
package/skills/security-maturity-tiers/skill.md +464 -0
package/skills/skill-update-loop/skill.md +463 -0
package/skills/supply-chain-integrity/skill.md +318 -0
package/skills/threat-model-currency/skill.md +404 -0
package/skills/threat-modeling-methodology/skill.md +312 -0
package/skills/webapp-security/skill.md +281 -0
package/skills/zeroday-gap-learn/skill.md +350 -0
package/vendor/blamejs/LICENSE +201 -0
package/vendor/blamejs/README.md +54 -0
package/vendor/blamejs/_PROVENANCE.json +54 -0
package/vendor/blamejs/retry.js +335 -0
package/vendor/blamejs/worker-pool.js +418 -0

package/data/_indexes/jurisdiction-map.json ADDED Viewed

@@ -0,0 +1,536 @@
+{
+  "EU": {
+    "skills": [
+      "age-gates-child-safety",
+      "ai-risk-management",
+      "api-security",
+      "attack-surface-pentest",
+      "cloud-security",
+      "compliance-theater",
+      "container-runtime-security",
+      "coordinated-vuln-disclosure",
+      "defensive-countermeasure-mapping",
+      "dlp-gap-analysis",
+      "email-security-anti-phishing",
+      "exploit-scoring",
+      "framework-gap-analysis",
+      "fuzz-testing-strategy",
+      "global-grc",
+      "identity-assurance",
+      "incident-response-playbook",
+      "kernel-lpe-triage",
+      "mcp-agent-trust",
+      "mlops-security",
+      "ot-ics-security",
+      "policy-exception-gen",
+      "pqc-first",
+      "researcher",
+      "sector-energy",
+      "sector-federal-government",
+      "sector-financial",
+      "sector-healthcare",
+      "security-maturity-tiers",
+      "skill-update-loop",
+      "supply-chain-integrity",
+      "threat-model-currency",
+      "threat-modeling-methodology",
+      "webapp-security",
+      "zeroday-gap-learn"
+    ],
+    "example_excerpts": {},
+    "skill_count": 35
+  },
+  "UK": {
+    "skills": [
+      "age-gates-child-safety",
+      "ai-risk-management",
+      "api-security",
+      "attack-surface-pentest",
+      "cloud-security",
+      "compliance-theater",
+      "container-runtime-security",
+      "coordinated-vuln-disclosure",
+      "defensive-countermeasure-mapping",
+      "dlp-gap-analysis",
+      "email-security-anti-phishing",
+      "framework-gap-analysis",
+      "fuzz-testing-strategy",
+      "global-grc",
+      "identity-assurance",
+      "incident-response-playbook",
+      "kernel-lpe-triage",
+      "mlops-security",
+      "ot-ics-security",
+      "pqc-first",
+      "researcher",
+      "sector-energy",
+      "sector-federal-government",
+      "sector-financial",
+      "sector-healthcare",
+      "security-maturity-tiers",
+      "skill-update-loop",
+      "supply-chain-integrity",
+      "threat-model-currency",
+      "threat-modeling-methodology",
+      "webapp-security"
+    ],
+    "example_excerpts": {},
+    "skill_count": 31
+  },
+  "AU": {
+    "skills": [
+      "age-gates-child-safety",
+      "ai-risk-management",
+      "api-security",
+      "attack-surface-pentest",
+      "cloud-security",
+      "compliance-theater",
+      "container-runtime-security",
+      "coordinated-vuln-disclosure",
+      "defensive-countermeasure-mapping",
+      "dlp-gap-analysis",
+      "email-security-anti-phishing",
+      "exploit-scoring",
+      "framework-gap-analysis",
+      "fuzz-testing-strategy",
+      "global-grc",
+      "identity-assurance",
+      "incident-response-playbook",
+      "kernel-lpe-triage",
+      "mcp-agent-trust",
+      "mlops-security",
+      "ot-ics-security",
+      "pqc-first",
+      "researcher",
+      "sector-energy",
+      "sector-federal-government",
+      "sector-financial",
+      "sector-healthcare",
+      "security-maturity-tiers",
+      "skill-update-loop",
+      "supply-chain-integrity",
+      "threat-model-currency",
+      "threat-modeling-methodology",
+      "webapp-security",
+      "zeroday-gap-learn"
+    ],
+    "example_excerpts": {},
+    "skill_count": 34
+  },
+  "SG": {
+    "skills": [
+      "age-gates-child-safety",
+      "api-security",
+      "cloud-security",
+      "container-runtime-security",
+      "coordinated-vuln-disclosure",
+      "email-security-anti-phishing",
+      "framework-gap-analysis",
+      "global-grc",
+      "identity-assurance",
+      "incident-response-playbook",
+      "mlops-security",
+      "researcher",
+      "sector-federal-government",
+      "sector-financial",
+      "sector-healthcare",
+      "threat-modeling-methodology",
+      "webapp-security"
+    ],
+    "example_excerpts": {},
+    "skill_count": 17
+  },
+  "JP": {
+    "skills": [
+      "age-gates-child-safety",
+      "ai-risk-management",
+      "api-security",
+      "cloud-security",
+      "container-runtime-security",
+      "coordinated-vuln-disclosure",
+      "dlp-gap-analysis",
+      "email-security-anti-phishing",
+      "framework-gap-analysis",
+      "global-grc",
+      "identity-assurance",
+      "incident-response-playbook",
+      "mlops-security",
+      "ot-ics-security",
+      "pqc-first",
+      "sector-energy",
+      "sector-federal-government",
+      "sector-financial",
+      "sector-healthcare",
+      "supply-chain-integrity",
+      "threat-modeling-methodology",
+      "webapp-security"
+    ],
+    "example_excerpts": {},
+    "skill_count": 22
+  },
+  "IN": {
+    "skills": [
+      "age-gates-child-safety",
+      "ai-risk-management",
+      "api-security",
+      "cloud-security",
+      "dlp-gap-analysis",
+      "email-security-anti-phishing",
+      "framework-gap-analysis",
+      "global-grc",
+      "identity-assurance",
+      "incident-response-playbook",
+      "mlops-security",
+      "researcher",
+      "sector-financial",
+      "sector-healthcare",
+      "threat-modeling-methodology"
+    ],
+    "example_excerpts": {},
+    "skill_count": 15
+  },
+  "CA": {
+    "skills": [
+      "age-gates-child-safety",
+      "ai-c2-detection",
+      "cloud-security",
+      "defensive-countermeasure-mapping",
+      "dlp-gap-analysis",
+      "framework-gap-analysis",
+      "global-grc",
+      "identity-assurance",
+      "sector-energy",
+      "sector-federal-government",
+      "sector-financial",
+      "sector-healthcare",
+      "zeroday-gap-learn"
+    ],
+    "example_excerpts": {},
+    "skill_count": 13
+  },
+  "BR": {
+    "skills": [
+      "age-gates-child-safety",
+      "ai-risk-management",
+      "api-security",
+      "cloud-security",
+      "dlp-gap-analysis",
+      "framework-gap-analysis",
+      "global-grc",
+      "incident-response-playbook",
+      "pqc-first",
+      "sector-financial",
+      "sector-healthcare",
+      "supply-chain-integrity",
+      "threat-modeling-methodology"
+    ],
+    "example_excerpts": {},
+    "skill_count": 13
+  },
+  "CN": {
+    "skills": [
+      "age-gates-child-safety",
+      "ai-risk-management",
+      "cloud-security",
+      "dlp-gap-analysis",
+      "framework-gap-analysis",
+      "global-grc",
+      "identity-assurance",
+      "incident-response-playbook",
+      "pqc-first",
+      "sector-federal-government",
+      "supply-chain-integrity",
+      "threat-modeling-methodology"
+    ],
+    "example_excerpts": {},
+    "skill_count": 12
+  },
+  "ZA": {
+    "skills": [
+      "sector-healthcare"
+    ],
+    "example_excerpts": {},
+    "skill_count": 1
+  },
+  "AE": {
+    "skills": [
+      "incident-response-playbook",
+      "sector-financial"
+    ],
+    "example_excerpts": {},
+    "skill_count": 2
+  },
+  "SA": {
+    "skills": [
+      "age-gates-child-safety",
+      "compliance-theater",
+      "defensive-countermeasure-mapping",
+      "dlp-gap-analysis",
+      "framework-gap-analysis",
+      "fuzz-testing-strategy",
+      "global-grc",
+      "mcp-agent-trust",
+      "mlops-security",
+      "pqc-first",
+      "sector-energy",
+      "sector-federal-government",
+      "sector-financial",
+      "sector-healthcare",
+      "supply-chain-integrity",
+      "zeroday-gap-learn"
+    ],
+    "example_excerpts": {},
+    "skill_count": 16
+  },
+  "NZ": {
+    "skills": [
+      "sector-financial"
+    ],
+    "example_excerpts": {},
+    "skill_count": 1
+  },
+  "KR": {
+    "skills": [
+      "age-gates-child-safety",
+      "dlp-gap-analysis",
+      "framework-gap-analysis",
+      "global-grc",
+      "supply-chain-integrity"
+    ],
+    "example_excerpts": {},
+    "skill_count": 5
+  },
+  "CL": {
+    "skills": [],
+    "example_excerpts": {},
+    "skill_count": 0
+  },
+  "IL": {
+    "skills": [
+      "ai-risk-management",
+      "api-security",
+      "cloud-security",
+      "container-runtime-security",
+      "coordinated-vuln-disclosure",
+      "dlp-gap-analysis",
+      "email-security-anti-phishing",
+      "framework-gap-analysis",
+      "global-grc",
+      "identity-assurance",
+      "incident-response-playbook",
+      "mlops-security",
+      "ot-ics-security",
+      "pqc-first",
+      "sector-energy",
+      "sector-federal-government",
+      "sector-financial",
+      "sector-healthcare",
+      "supply-chain-integrity",
+      "threat-modeling-methodology",
+      "webapp-security"
+    ],
+    "example_excerpts": {},
+    "skill_count": 21
+  },
+  "CH": {
+    "skills": [
+      "dlp-gap-analysis",
+      "framework-gap-analysis",
+      "global-grc",
+      "identity-assurance",
+      "pqc-first",
+      "supply-chain-integrity"
+    ],
+    "example_excerpts": {},
+    "skill_count": 6
+  },
+  "HK": {
+    "skills": [
+      "dlp-gap-analysis",
+      "framework-gap-analysis",
+      "global-grc",
+      "pqc-first",
+      "sector-financial",
+      "supply-chain-integrity"
+    ],
+    "example_excerpts": {},
+    "skill_count": 6
+  },
+  "TW": {
+    "skills": [
+      "cloud-security",
+      "container-runtime-security",
+      "dlp-gap-analysis",
+      "framework-gap-analysis",
+      "global-grc",
+      "ot-ics-security",
+      "pqc-first",
+      "supply-chain-integrity"
+    ],
+    "example_excerpts": {},
+    "skill_count": 8
+  },
+  "ID": {
+    "skills": [
+      "age-gates-child-safety",
+      "ai-attack-surface",
+      "ai-c2-detection",
+      "ai-risk-management",
+      "api-security",
+      "attack-surface-pentest",
+      "cloud-security",
+      "compliance-theater",
+      "container-runtime-security",
+      "coordinated-vuln-disclosure",
+      "defensive-countermeasure-mapping",
+      "dlp-gap-analysis",
+      "email-security-anti-phishing",
+      "exploit-scoring",
+      "framework-gap-analysis",
+      "fuzz-testing-strategy",
+      "global-grc",
+      "identity-assurance",
+      "incident-response-playbook",
+      "kernel-lpe-triage",
+      "mcp-agent-trust",
+      "mlops-security",
+      "ot-ics-security",
+      "policy-exception-gen",
+      "pqc-first",
+      "rag-pipeline-security",
+      "researcher",
+      "sector-energy",
+      "sector-federal-government",
+      "sector-financial",
+      "sector-healthcare",
+      "skill-update-loop",
+      "supply-chain-integrity",
+      "threat-model-currency",
+      "threat-modeling-methodology",
+      "webapp-security",
+      "zeroday-gap-learn"
+    ],
+    "example_excerpts": {},
+    "skill_count": 37
+  },
+  "VN": {
+    "skills": [
+      "dlp-gap-analysis",
+      "framework-gap-analysis",
+      "global-grc",
+      "supply-chain-integrity"
+    ],
+    "example_excerpts": {},
+    "skill_count": 4
+  },
+  "US_NYDFS": {
+    "skills": [
+      "ai-risk-management",
+      "api-security",
+      "cloud-security",
+      "coordinated-vuln-disclosure",
+      "dlp-gap-analysis",
+      "email-security-anti-phishing",
+      "framework-gap-analysis",
+      "global-grc",
+      "identity-assurance",
+      "incident-response-playbook",
+      "mlops-security",
+      "pqc-first",
+      "researcher",
+      "sector-financial",
+      "skill-update-loop",
+      "supply-chain-integrity",
+      "webapp-security"
+    ],
+    "example_excerpts": {},
+    "skill_count": 17
+  },
+  "NO": {
+    "skills": [
+      "sector-energy",
+      "skill-update-loop"
+    ],
+    "example_excerpts": {},
+    "skill_count": 2
+  },
+  "MX": {
+    "skills": [
+      "sector-financial"
+    ],
+    "example_excerpts": {},
+    "skill_count": 1
+  },
+  "AR": {
+    "skills": [
+      "age-gates-child-safety"
+    ],
+    "example_excerpts": {},
+    "skill_count": 1
+  },
+  "TR": {
+    "skills": [],
+    "example_excerpts": {},
+    "skill_count": 0
+  },
+  "TH": {
+    "skills": [],
+    "example_excerpts": {},
+    "skill_count": 0
+  },
+  "PH": {
+    "skills": [],
+    "example_excerpts": {},
+    "skill_count": 0
+  },
+  "US_CALIFORNIA": {
+    "skills": [
+      "age-gates-child-safety",
+      "compliance-theater",
+      "dlp-gap-analysis",
+      "framework-gap-analysis",
+      "global-grc"
+    ],
+    "example_excerpts": {},
+    "skill_count": 5
+  },
+  "EU_DE_BSI": {
+    "skills": [
+      "age-gates-child-safety",
+      "cloud-security",
+      "coordinated-vuln-disclosure",
+      "fuzz-testing-strategy",
+      "pqc-first"
+    ],
+    "example_excerpts": {},
+    "skill_count": 5
+  },
+  "EU_FR_ANSSI": {
+    "skills": [
+      "cloud-security",
+      "pqc-first"
+    ],
+    "example_excerpts": {},
+    "skill_count": 2
+  },
+  "EU_ES_AEPD": {
+    "skills": [
+      "sector-financial"
+    ],
+    "example_excerpts": {},
+    "skill_count": 1
+  },
+  "EU_IT_AgID_ACN": {
+    "skills": [
+      "cloud-security",
+      "fuzz-testing-strategy"
+    ],
+    "example_excerpts": {},
+    "skill_count": 2
+  },
+  "EU_ENISA": {
+    "skills": [],
+    "example_excerpts": {},
+    "skill_count": 0
+  }
+}