How hooxuefeng/snowedge works
SnowEdge is a local-first workspace for authorized security assessments. The documented flow begins with projects and scope, continues through asset discovery and scans, request and authorization testing, findings and evidence, AI-assisted analysis, retesting, and report delivery. The graph groups these domain stages and includes the persistent job engine as an internal execution layer. Edges are limited to relationships shown in excerpts, the SOURCE INDEX, or README; unsampled capability branches are included where documented, with uncertain wiring omitted.
Main entry points: main.py Web application · scan_engine.py Scan engine · request_routes.py Request workspace · job_engine.py Persistent job engine
Components 28
Workspace and scope
- Web application
app/main.py - Authorized scope
app/scope.py
Asset discovery
- Scan controls
app/scan_routes.py - Scan engine
app/services/scan_engine.py - Network and web probes
app/scanners - Technology fingerprints
app/services/fingerprint_engine.py - External toolchain
app/services/toolchain.py
Request testing
- Request workspace
app/request_routes.py - Request handling
app/services/request_workspace.py - Browser observation
app/services/browser_workspace.py - Authorization testing
app/services/authorization_testing.py - Burp extension
integrations/burp-extension/src/main/java/burp/BurpExtender.java
Findings and analysis
- Finding workflow
app/services/finding_service.py - Evidence chain
app/services/evidence_chain.py - Evidence safety
app/services/evidence_safety.py - AI analyst
app/services/analyst_copilot.py - Skill registry
app/skills/registry.py - Hash analysis
app/services/hash_analysis - Utility tools
app/services/utility_tools.py
Retest and delivery
- Remediation and retest
app/services/remediation.py - Report delivery
app/services/report_render.py - Report controls
app/delivery_routes.py
Execution and persistence
- Assessment records
app/models.py - Persistent job engine
app/services/job_engine.py - Background worker
worker.py
Other components
- Security assessor
- Nmap and scanners
- AI provider
Connections 34
- Security assessor → Web application: uses
README.md - Web application → Authorized scope: enforces scope
app/main.py - Web application → Scan controls: registers routes
app/main.py - Scan controls → Scan engine: invokes scans
app/scan_routes.py - Scan engine → Authorized scope: checks targets
app/services/scan_engine.py - Scan engine → Network and web probes: uses probes
app/services/scan_engine.py - Scan engine → Technology fingerprints: analyzes observations
app/services/scan_engine.py - Scan engine → Finding workflow: creates findings
app/services/scan_engine.py - Scan controls → Persistent job engine: queues scan jobs
app/scan_routes.py - Security assessor → External toolchain: selects tools
README.md - External toolchain → Nmap and scanners: dispatches tools
README.md - Web application → Request workspace: registers routes
app/main.py - Request workspace → Request handling: handles requests
app/request_routes.py - Request workspace → Authorized scope: checks target
app/request_routes.py - Security assessor → Browser observation: observes assets
README.md - Security assessor → Authorization testing: tests authorization
README.md - Request workspace → Persistent job engine: queues work
app/request_routes.py - Scan engine → Evidence chain: records evidence
app/services/scan_engine.py - Finding workflow → Evidence safety: checks evidence
app/services/finding_service.py - Web application → AI analyst: offers analysis
README.md - AI analyst → AI provider: requests analysis
app/services/analyst_copilot.py - AI analyst → Evidence safety: uses safeguards
app/services/analyst_copilot.py - Security assessor → Skill registry: configures skills
app/skills/registry.py - Background worker → Persistent job engine: processes jobs
worker.py - Persistent job engine → AI analyst: runs queries
app/services/job_engine.py - Persistent job engine → Assessment records: stores job state
app/services/job_engine.py - Web application → Assessment records: persists workspace
app/main.py - Security assessor → Remediation and retest: retests findings
README.md - Report controls → Report delivery: renders exports
app/delivery_routes.py - Report delivery → Finding workflow: organizes findings
README.md - Report delivery → Evidence chain: organizes evidence
README.md - Security assessor → Hash analysis: analyzes hashes
README.md - Security assessor → Utility tools: uses utilities
README.md - Burp extension → Request workspace: imports requests
README.md