aisecurity.llc

Capabilities reference

engines/seceng-engine/src/capabilities.rs (savvy-cli, self-describing capability registry — also exposed live at GET /meta/capabilities on a running server)

Extracted via best-effort text parsing of the Rust source, not a Rust compiler/schemars run. Field coverage may be incomplete; treat as a snapshot, not the full registry schema.

Capability	Summary	Lifecycle	Visibility	Pillar	CLI / HTTP
`seceng.attack.code.scan` Code Security Scan	Scan a local repository for AI security, source/sink, OWASP LLM, and attack-path signals.	Preview	Public	Attack	`savvy seceng scan <path> [--quick] [--json]` `POST /v1/seceng/vcs/enqueue-scan`
`seceng.attack.graph.pipeline` Throughline Attack Graph Pipeline	Build attack paths, remediation priorities, export artifacts, and review queues from SecEng evidence.	Preview	Partner	Attack	`savvy seceng graph --demo` `GET /v1/seceng/graph/demo`
`seceng.attack.finding.explain` Finding Explanation	Explain what a finding observed, why it matters, what evidence supports it, and how to reproduce or retest it.	Experimental	Public	Attack	`savvy seceng finding explain <finding-id>` `GET /v1/seceng/findings`
`seceng.evidence.export` Evidence Export	Export findings, attack paths, SARIF, Markdown reports, and partner-safe evidence bundles.	Preview	Partner	Evidence	`savvy seceng report <scan-output-dir>` `GET /v1/seceng/graph/export`
`seceng.defend.doctor` SecEng Doctor	Inspect engine health, compatibility, permissions, local API state, and support-bundle readiness.	Experimental	Public	Defend	`savvy seceng doctor --json` `GET /meta/diagnostics`
`seceng.map.capability.introspect` Capability Introspection	Discover SecEng capabilities, schemas, examples, formats, errors, workflows, controls, and compatibility.	Preview	Public	Map	`savvy seceng capabilities --json` `GET /meta/capabilities`
`seceng.map.context.export` SecEng Context Export	Create bounded, task-specific context packs for LLMs, SDK generation, CI, and partner engineers.	Preview	Public	Map	`savvy seceng context export --profile mini` `GET /meta/context`
`seceng.defend.recipe.run` Executable SecEng Recipes	List, inspect, and run deterministic SecEng recipes backed by fixtures and assertions.	Preview	Partner	Defend	`savvy seceng recipes --json` `GET /meta/recipes`
`seceng.evidence.partner.conformance` Partner Conformance Check	Validate that a partner integration can discover contracts, consume schemas, run fixture workflows, and handle errors safely.	Preview	Partner	Evidence	`savvy seceng conformance --partner generic-oem --json` `GET /meta/conformance`
`seceng.map.capability.diff` Capability and Schema Diff	Compare two capability registry snapshots and report added, removed, changed, and breaking contract deltas.	Preview	Public	Map	`savvy seceng capability-diff --base old.json --head new.json --json` `POST /meta/capability-diff`

10 capabilities.