security-ownership-map

Analyze Git history to build a bipartite people-files ownership graph and quantify ownership risk.

Updated Mar 17, 2026
One-click install
npx skills add https://github.com/Avi977/ace-claude-toolkit --skill security-ownership-map-avi977
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: security-ownership-map
Source: https://github.com/Avi977/ace-claude-toolkit/tree/main/skills/security-ownership-map
Command: npx skills add https://github.com/Avi977/ace-claude-toolkit --skill security-ownership-map-avi977

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill requires networkx, and includes scripts (resource) and references (resource) components.

What problem does it solve?

Builds a bipartite graph of people and files from Git history to reveal ownership risk and the bus factor, enabling teams to spot orphaned code and accountability gaps.

Core Features & Use Cases

  • Create a people-files ownership map from Git history and compute ownership risk scores.
  • Export graph artifacts (CSV/JSON/graphml) for Neo4j, Gephi, or dashboards.
  • Identify clusters of related files via co-change graphs to understand maintenance relationships and risk pockets.

Quick Start

Run the ownership map on your repository to generate ownership and bus-factor reports with CSV/JSON outputs.

Frequently Asked Questions about security-ownership-map

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I calculate the bus factor for my Git repository?

Git history analysis for bus factor calculation constructs a bipartite people-files ownership graph to quantify ownership risk. It processes commit logs to identify maintainers and surface orphaned sensitive code within your codebase.

What is a people-files ownership graph in code security?

A people-files ownership graph is a bipartite network mapping developers to modified source files to reveal accountability gaps. It analyzes co-change clusters to identify maintenance relationships and risk pockets within your codebase.

Can I export Git ownership data to Neo4j or Gephi for visualization?

Yes, you can export Git ownership data to Neo4j or Gephi for visualization. The workflow outputs graph artifacts in CSV, JSON, and graphml formats, providing the necessary node and edge data for external graph visualization platforms.

Do I need Python and networkx to run Git ownership analysis?

Yes, you need Python 3 and the networkx dependency to run Git ownership analysis. The workflow executes via a Python script to build the ownership graph and compute bus factor metrics from your repository commit history.

How do I find orphaned sensitive code in my repository?

To find orphaned sensitive code, analyze Git history to construct an ownership graph and quantify ownership risk scores. This approach highlights files lacking active maintainers and identifies accountability gaps in your codebase.

What is the best way to identify maintainers from Git commit history?

The best way to identify maintainers from Git commit history is to map developer-file modifications into a bipartite graph and compute ownership risk scores. This networkx-based approach quantifies accountability and highlights key contributors.