<!-- Copyright (c) 2026 defconxt. All rights reserved. -->
<!-- Licensed under AGPL-3.0 — see LICENSE file for details. -->
<!-- NERF is a trademark of defconxt. -->
# Performing MITRE ATT&CK Threat Modeling — API Reference

## agent.js CLI

```bash
# Map action
node scripts/agent.js --action map

# Coverage action
node scripts/agent.js --action coverage

# Navigator action
node scripts/agent.js --action navigator

# Gaps action
node scripts/agent.js --action gaps
```

## ATT&CK Mapping Schema

```json
{
  "threat": "SQL Injection",
  "technique_id": "T1190",
  "technique_name": "Exploit Public-Facing Application",
  "tactic": "Initial Access"
}
```

## Navigator Layer Schema

```json
{
  "name": "Threat Model Coverage",
  "domain": "enterprise-attack",
  "techniques": [
    {"techniqueID": "T1190", "color": "#ff6666", "comment": "Gap - no detection"}
  ]
}
```
