security-ownership-map

Analyze git history to map security ownership and compute bus factor.

Updated May 11, 2026
One-click install
npx skills add https://github.com/guhans6/agent-workbench --skill security-ownership-map-guhans6
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: security-ownership-map
Source: https://github.com/guhans6/agent-workbench/tree/main/shared/skills/security-ownership-map
Command: npx skills add https://github.com/guhans6/agent-workbench --skill security-ownership-map-guhans6

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill requires git, networkx, and includes scripts (resource) and references (resource) components.

What problem does it solve?

This Skill analyzes the security ownership and bus factor in git repositories, identifying potential risks and ownership clusters.

Core Features & Use Cases

  • Security Ownership Topology: Maps people and files from git history, identifying ownership and sensitive code ownership.
  • Bus Factor Analysis: Computes the bus factor for sensitive code, identifying single points of failure.
  • Data Export: Exports the analysis results in CSV/JSON format for graph databases and visualization tools like Neo4j and Gephi.
  • Use Case: Suppose you have a large codebase with critical security components. Use this Skill to identify ownership clusters, compute the bus factor for sensitive code, and identify potential security risks.

Quick Start

Run the run_ownership_map.py script with the following command:

python scripts/run_ownership_map.py --repo . --out ownership-map-out

Frequently Asked Questions about security-ownership-map

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I analyze the bus factor for sensitive code in a git repository?

To analyze the bus factor for sensitive code, you can run the `run_ownership_map.py` script against your repository. It parses git history to compute the bus factor and identify single points of failure in critical security components.

What is security ownership topology and how does it map code risks?

Security ownership topology maps people and files from git history to identify ownership clusters and sensitive code ownership. It helps visualize potential security risks by highlighting who controls critical components in the codebase.

How do I export git ownership analysis results for visualization in Neo4j or Gephi?

You can export git ownership analysis results in CSV or JSON format using the `run_ownership_map.py` script. This outputs ownership maps, sensitivity scores, and community detection data for graph databases and visualization tools like Neo4j and Gephi.

Do I need networkx and git installed to map repository ownership and sensitivity scores?

Yes, you need both git and networkx installed to map repository ownership and sensitivity scores. These dependencies are required to parse git history and perform community detection for the analysis.

Can I use this approach to identify single points of failure during a security audit?

Yes, you can use this approach to identify single points of failure during a security audit. It computes the bus factor for sensitive code, identifies ownership clusters, and outputs sensitivity scores to assess risk in large codebases.

What's the best way to run a bus factor analysis on a local codebase?

The best way to run a bus factor analysis on a local codebase is to execute `python scripts/run_ownership_map.py --repo . --out ownership-map-out`, which generates ownership maps and sensitivity scores from your git history.