<!-- Copyright (c) 2026 defconxt. All rights reserved. -->
<!-- Licensed under AGPL-3.0 — see LICENSE file for details. -->

# Detecting Data Staging For Exfiltration — API Reference

## Actions

| Action | Description |
|--------|-------------|
| detect | Primary analysis action |
| archives | Secondary analysis or configuration |
| scan | Reporting or validation |

## Usage

```bash
node scripts/agent.js --action detect --input /tmp/input.json --output /tmp/output.json
node scripts/agent.js --action archives --input /tmp/input.json --output /tmp/output.json
node scripts/agent.js --action scan --input /tmp/input.json --output /tmp/output.json
```

## Output Format

All actions return JSON with standard envelope:

```json
{
  "tool": "staging-detector",
  "version": "1.0",
  "timestamp": "2026-01-01T00:00:00+00:00",
  "action": "detect"
}
```
