SecDevAI Export Command (Alias)

Description

Alias for /secdevai export - Export security review results to Markdown and SARIF formats.

Usage

code

/secdevai-export json           # Export from a JSON results file
/secdevai export json           # Same via main command

What This Command Does

This is an alias for /secdevai export. See the main /secdevai command documentation for full details.

When invoked, this command:

•Converts structured security findings into a Markdown report and SARIF file
•Prompts the user to confirm the result directory (default: secdevai-results)
•Saves timestamped files: secdevai-<type>-YYYYMMDD_HHMMSS.md and .sarif

Script

The export logic lives in scripts/results_exporter.py within this skill directory. It provides:

•export_results(data, result_dir, command_type) - Main entry point
•convert_to_markdown(data) - Convert findings to Markdown
•convert_to_sarif(data) - Convert findings to SARIF 2.1.0

Usage from AI skills

python

from pathlib import Path
import importlib.util

# Load the exporter from the deployed skill scripts
script_path = Path("secdevai-export/scripts/results_exporter.py")
spec = importlib.util.spec_from_file_location("results_exporter", script_path)
mod = importlib.util.module_from_spec(spec)
spec.loader.exec_module(mod)

# Export to markdown and SARIF
markdown_path, sarif_path = mod.export_results(data, command_type="review")

Data format

The data dictionary should follow this structure:

json

{
  "metadata": {
    "tool": "secdevai-ai-analysis",
    "version": "1.0.0",
    "timestamp": "ISO 8601 timestamp",
    "target_file": "file path or 'codebase'",
    "analyzer": "AI Security Review"
  },
  "summary": {
    "total_findings": 0,
    "critical": 0,
    "high": 0,
    "medium": 0,
    "low": 0,
    "info": 0
  },
  "findings": [],
  "affected_endpoints": [],
  "recommendations": {
    "immediate_actions": [],
    "long_term_improvements": []
  }
}

Expected Response

See /secdevai command documentation. This alias executes /secdevai export with the same behavior.

Important:

•The exporter will prompt the user to confirm the result directory (default: secdevai-results)
•Results are saved with timestamp: secdevai-<type>-YYYYMMDD_HHMMSS.md and .sarif
•SARIF output conforms to SARIF v2.1.0 schema for integration with GitHub Code Scanning, VS Code SARIF Viewer, etc.