BlameJS
Official@blamejs
Because when something breaks, blame should know exactly where it lives. We own the stack so you don't have to chase the fault across an ecosystem.
Agent Skills by BlameJS
Showing 51 vetted skills indexed across 1 GitHub repositories.
blamejsdlp-gap-analysis
Identify DLP coverage gaps across AI-era exfiltration channels.
blamejslog-injection-telemetry
Sanitize CR/LF injection and redact secrets across telemetry pipelines.
blamejsrag-pipeline-security
Assess RAG pipeline security risks and map them to MITRE ATLAS TTPs.
blamejsaudit-log-integrity
Assess audit logging controls for resistance to privileged attacker tampering.
blamejsthreat-modeling-methodology
Enumerate AI threats and map them to ATLAS, ATT&CK, CWE, and CVE catalogs.
blamejspolicy-exception-gen
Generate auditor-ready policy exception documents mapping residual threats to MITRE TTPs.
blamejsai-attack-surface
Assess AI/ML attack surfaces mapped to MITRE ATLAS v2026.06.
blamejscoordinated-vuln-disclosure
Audit coordinated vulnerability disclosure programs for regulatory compliance and AI vulnerability handling.
blamejsot-ics-security
Assess OT/ICS security posture with Purdue asset inventory and IEC 62443 scoring.
blamejsidp-incident-response
Run a 10-phase IdP tenant compromise assessment with jurisdiction clock tracking.
blamejsframework-gap-analysis
Analyze compliance framework controls against current attacker TTPs to produce structured gap declarations.
blamejsage-gates-child-safety
Map age assurance and child safety controls across 25+ global regulatory regimes.
blamejssupply-chain-integrity
Audit software and AI supply chains against mid-2026 attack patterns.
blamejssector-financial
Map mid-2026 financial cyber threats to regulatory controls across 35+ jurisdictions.
blamejsmail-server-hardening
Audit SMTP, IMAP, POP3, ManageSieve, and mailbox-DAV listeners for protocol-layer security gaps.
blamejsprivacy-consent-ops
Audit sanctions screening, consent management, DSR erasure, and ROPA workflows for operational integrity gaps.
blamejszeroday-gap-learn
Map CVE attack vectors to MITRE ATLAS TTPs and assess framework control gaps.
blamejsvc-wallet-trust
Audit verifier trust controls for credential acceptance workflows.
blamejspqc-first
Enforce post-quantum cryptography standards and analyze compliance gaps across security frameworks.
blamejsmcp-agent-trust
Enumerate MCP trust boundary failures and assess compliance gaps.
blamejsthreat-model-currency
Score organizational threat models against a 14-class mid-2026 threat checklist.
blamejscloud-security
Map cloud and AI workload threats to compliance controls for AWS, Azure, and GCP.
blamejssector-federal-government
Map cybersecurity compliance gaps against federal and allied frameworks for 2026 threats.
blamejsidentity-assurance
Assess identity assurance gaps across AAL/IAL/FAL, MFA, and OAuth/JWT controls.
Frequently Asked Questions About BlameJS
FAQPage SchemaWhat specific security tasks does BlameJS enable?▼
BlameJS enables precise identification of security gaps across RAG pipelines, cloud IAM, and OT/ICS environments. It facilitates threat modeling against MITRE ATLAS and ATT&CK, generates regulatory compliance artifacts for the EU AI Act and ISO/IEC 42001, and provides RWEP-based exploit prioritization for vulnerability management.
Which technical personas benefit from these capabilities?▼
Security architects, GRC analysts, and cloud infrastructure engineers utilize these capabilities to bridge the gap between high-level regulatory requirements and granular technical controls. It is designed for teams managing complex, multi-jurisdictional attack surfaces who require evidence-based security posture validation.
What are the prerequisites for implementing these security assessments?▼
Implementation requires access to existing telemetry pipelines, cloud provider IAM configurations, and current threat model documentation. Users must provide environment-specific metadata to map findings against the relevant MITRE frameworks and regulatory catalogs supported by the platform.