<!-- Copyright (c) 2026 defconxt. All rights reserved. -->
<!-- Licensed under AGPL-3.0 — see LICENSE file for details. -->
<!-- NERF is a trademark of defconxt. -->
# Implementing Threat Modeling Training — API Reference

## agent.js CLI

```bash
node scripts/agent.js --action assess --input org_survey.json
node scripts/agent.js --action gaps --input assessment.json
node scripts/agent.js --action plan --input requirements.json
node scripts/agent.js --action exercises --query practitioner
node scripts/agent.js --action report --input metrics.json --output report.json
## Training Tracks

| Track | Audience | Duration |
|-------|----------|----------|
| fundamentals | All developers | 4 hours |
| practitioner | Security champions | 16 hours |
| expert | Architects, AppSec | 24 hours |

## Maturity Levels

| Level | Name | Key Indicators |
|-------|------|---------------|
| 1 | Ad Hoc | Inconsistent modeling |
| 2 | Defined | Templates, checklists |
| 3 | Managed | SDLC integration |
| 4 | Measured | Metrics tracked |
| 5 | Optimized | Continuous improvement |
