feat: add NIST CSF 2.0 nist_csf field to all 754 cybersecurity skills

Mapped every skill to NIST CSF 2.0 subcategory IDs (GV/ID/PR/DE/RS/RC functions)
based on subdomain and content analysis. Restores 11 skills corrupted during
prior rebase, re-enriching with ATLAS, D3FEND, NIST AI RMF, and CSF 2.0 fields.

All 754 skills now carry structured mappings for all 5 security frameworks:
- MITRE ATT&CK (in tags)
- MITRE ATLAS v5.5 (atlas_techniques)
- MITRE D3FEND v1.3 (d3fend_techniques)
- NIST AI RMF 1.0 (nist_ai_rmf)
- NIST CSF 2.0 (nist_csf)
This commit is contained in:
mukul975
2026-04-06 11:17:40 +02:00
parent e8105a2f4d
commit efca3ec611
754 changed files with 12847 additions and 2832 deletions
@@ -1,18 +1,29 @@
---
name: performing-api-inventory-and-discovery
description: >
Performs API inventory and discovery to identify all API endpoints in an organization's
environment including documented, undocumented, shadow, zombie, and deprecated APIs. The
tester uses passive traffic analysis, active scanning, DNS enumeration, JavaScript analysis,
and cloud resource inventory to build a comprehensive API catalog. Maps to OWASP API9:2023
Improper Inventory Management. Activates for requests involving API discovery, shadow API
detection, API inventory audit, or attack surface mapping.
description: 'Performs API inventory and discovery to identify all API endpoints in an organization''s environment including
documented, undocumented, shadow, zombie, and deprecated APIs. The tester uses passive traffic analysis, active scanning,
DNS enumeration, JavaScript analysis, and cloud resource inventory to build a comprehensive API catalog. Maps to OWASP API9:2023
Improper Inventory Management. Activates for requests involving API discovery, shadow API detection, API inventory audit,
or attack surface mapping.
'
domain: cybersecurity
subdomain: api-security
tags: [api-security, owasp, api-discovery, shadow-api, inventory, attack-surface]
tags:
- api-security
- owasp
- api-discovery
- shadow-api
- inventory
- attack-surface
version: 1.0.0
author: mahipal
license: Apache-2.0
nist_csf:
- PR.PS-01
- ID.RA-01
- PR.DS-10
- DE.CM-01
---
# Performing API Inventory and Discovery