<!-- Copyright (c) 2026 defconxt. All rights reserved. -->
<!-- Licensed under AGPL-3.0 — see LICENSE file for details. -->
<!-- NERF is a trademark of defconxt. -->
# performing-source-code-assisted-penetration-testing — API Reference

## Agent Script

| Command | Description |
|---------|-------------|
| `scan --source <dir> --rules <ruleset>` | SAST scan source code |
| `exploit --findings <file> --target <url>` | Validate findings dynamically |
| `report --sast <file> --dast <file> --format <fmt>` | Generate combined report |
