What problem does it solve?
This Skill helps identify security risks in codebases by analyzing git history to understand who owns which files, compute the bus factor (how many people need to leave before a project is at risk), and detect sensitive code ownership issues.
Core Features & Use Cases
- Ownership Topology: Builds a graph of people and files from git history.
- Bus Factor Calculation: Computes the bus factor for files and identifies hotspots.
- Sensitive Code Analysis: Flags orphaned or poorly-owned sensitive code (auth, crypto, secrets).
- Graph Export: Generates CSV and GraphML outputs for visualization in tools like Neo4j and Gephi.
- Use Case: A security team wants to understand the ownership risk for all files tagged as 'crypto' or 'auth'. They can use this skill to find files with a low bus factor and no recent security-focused commits, highlighting potential vulnerabilities.
Quick Start
Run the security-ownership-map skill to analyze the current repository for security ownership and bus factor.