Mahipal 2545b2d3d5 Fix framework-ID defects across 53 skills (grounded in authoritative data) ...

Deterministic audit against vendored MITRE/NIST oracles (ATT&CK v19.1,
ATLAS 2026.07, NIST CSF 2.0, D3FEND v1.4.0) found and fixed:

- 27 wrong-framework leaks on 12 AI-security skills: ATLAS AML.* IDs were
  under `mitre_attack` (-> `atlas_techniques`) and AI-RMF GOVERN/MEASURE IDs
  under `nist_csf` (-> `nist_ai_rmf`).
- RS.AN-01 -> RS.AN-03 on 37 forensics/incident-analysis skills (CSF 1.1 ID
  retired in CSF 2.0; RS.AN-03 is the incident-analysis successor).
- PR.DS-06 -> PR.DS-01 on the SLSA/Sigstore provenance skill (CSF 1.1 ID
  absorbed into PR.DS-01 in CSF 2.0; body prose updated too).
- AML.T0104 -> AML.T0010 on 3 software-supply-chain skills (T0104 is
  "Publish Poisoned AI Agent Tool" -- wrong topic; T0010 "AI Supply Chain
  Compromise" is correct).

CSF/ATLAS replacements verified against NIST CSWP.29, the official CSF
1.1->2.0 transition workbook, and mitre-atlas/atlas-data.
Framework-ID gate: 0 defects. Schema: 817/817 pass.

2026-08-02 06:00:54 -07:00

..

references

Add 55 new skills across 3 new domains + 6 undercovered areas (762 -> 817)

2026-06-22 19:08:16 +02:00

scripts

Add 55 new skills across 3 new domains + 6 undercovered areas (762 -> 817)

2026-06-22 19:08:16 +02:00

LICENSE

Add 55 new skills across 3 new domains + 6 undercovered areas (762 -> 817)

2026-06-22 19:08:16 +02:00

SKILL.md

Fix framework-ID defects across 53 skills (grounded in authoritative data)

2026-08-02 06:00:54 -07:00