security-ownership-map

Analyze git history to map file ownership and compute bus-factor metrics.

2|Updated Feb 18, 2026
One-click install
npx skills add https://github.com/alanharrryy-wq/hitech-os --skill security-ownership-map-alanharrryy-wq
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: security-ownership-map
Source: https://github.com/alanharrryy-wq/hitech-os/tree/main/.agents/skills/C_worker/security-ownership-map
Command: npx skills add https://github.com/alanharrryy-wq/hitech-os --skill security-ownership-map-alanharrryy-wq

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill requires networkx, and includes scripts (resource) and references (resource) components.

What problem does it solve?

Analyze git history to identify who owns which files, surface security hotspots, and compute ownership risk metrics (bus factor) to inform secure code ownership decisions.

Core Features & Use Cases

  • Build a bipartite graph of people and files from git history and compute ownership risk, last-touch times, and retention metrics, exporting artifacts for Neo4j/Gephi.
  • Generate a file co-change graph (based on shared commits) to cluster related files by movement and identify ownership drift.
  • Produce a security-focused summary (orphaned_sensitive_code, hidden_owners, bus_factor_hotspots) and export outputs as CSV/JSON/GraphML for visualization and audits.

Quick Start

Run the ownership map against your repository to generate CSV/JSON graph artifacts and a security summary in ownership-map-out.

Frequently Asked Questions about security-ownership-map

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I calculate the bus factor for my codebase using git history?

To calculate the bus factor using git history, this skill builds a bipartite ownership graph mapping people to files and computes retention metrics to identify security hotspots and ownership risk across your repositories.

What is CODEOWNERS drift and how do I detect it in my repository?

CODEOWNERS drift occurs when actual file authors diverge from defined ownership rules. You can detect it by analyzing git history to map real people-to-files ownership and comparing it against your existing CODEOWNERS file structure.

How do I find orphaned sensitive code across multiple repositories?

You can find orphaned sensitive code across multiple repositories by applying sensitivity rules to git history analysis, which surfaces unowned or abandoned critical files in a generated security summary report.

Can I export the git co-change graph to Neo4j or Gephi for visualization?

Yes, you can export the git co-change graph to Neo4j or Gephi. The skill generates graph artifacts in CSV, JSON, and GraphML formats specifically designed for import into these visualization tools.

Do I need networkx to perform community detection on file co-change clusters?

Yes, you need networkx installed to perform community detection on file co-change clusters. This Python dependency is required to cluster related files by shared commit movement and identify ownership drift.

What is the best way to map security ownership without manual file tracking?

The best way to map security ownership without manual tracking is to parse git commit history to automatically generate a bipartite graph of people and files, computing last-touch times and bus-factor metrics.