<!-- Copyright (c) 2026 defconxt. All rights reserved. -->
<!-- Licensed under AGPL-3.0 — see LICENSE file for details. -->
<!-- NERF is a trademark of defconxt. -->
# Performing STRIDE Analysis — API Reference

## agent.js CLI

```bash
# Enumerate action
node scripts/agent.js --action enumerate

# Score action
node scripts/agent.js --action score

# Report action
node scripts/agent.js --action report
```

## STRIDE Category Reference

| Code | Category | Security Property | Controls |
|------|----------|-------------------|----------|
| S | Spoofing | Authentication | MFA, certificates, tokens |
| T | Tampering | Integrity | Signatures, HMAC, checksums |
| R | Repudiation | Non-repudiation | Audit logs, timestamps |
| I | Information Disclosure | Confidentiality | Encryption, ACLs |
| D | Denial of Service | Availability | Rate limits, redundancy |
| E | Elevation of Privilege | Authorization | RBAC, least privilege |

## DFD Element JSON Schema

```json
{
  "name": "Component Name",
  "type": "process | data_store | data_flow | external_entity",
  "crosses_boundary": true,
  "boundary": "DMZ | Internal | Database"
}
```
