security-ownership-map

Build a security ownership map from git history with CSV/JSON exports.

167|34|Updated Jan 3, 2026
One-click install
npx skills add https://github.com/tercumantanumut/selene --skill security-ownership-map-tercumantanumut
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: security-ownership-map
Source: https://github.com/tercumantanumut/selene/tree/main/lib/skills/catalog/bundled/security-ownership-map
Command: npx skills add https://github.com/tercumantanumut/selene --skill security-ownership-map-tercumantanumut

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill requires networkx, and includes scripts (resource) and references (resource) components.

What problem does it solve?

Build a security ownership map from git history to identify who owns code paths and flag stale or high-risk areas.

Core Features & Use Cases

  • Build a history-driven ownership map (people ↔ files), compute ownership risk and bus factor, and export graph artifacts (CSV/JSON) for Neo4j/Gephi.
  • Detect orphaned sensitive code, track CODEOWNERS drift, and provide targeted queries to surface risk hotspots for security teams.
  • Use Case: A security team audits a large codebase to determine owners of sensitive modules and prepare a risk report.

Quick Start

Run the one-shot runner to generate the ownership map for your repository.

Frequently Asked Questions about security-ownership-map

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I map code ownership from git history to find orphaned sensitive code?

To map code ownership from git history, build a security ownership graph linking people to files to flag stale areas and orphaned sensitive modules. You can export CSV or JSON summaries to surface risk hotspots for security audits.

What is CODEOWNERS drift and how can I detect it across a repository?

CODEOWNERS drift occurs when actual file ownership changes diverge from defined CODEOWNERS rules. You can detect this drift by applying history-driven analysis across your project to track ownership changes and flag high-risk areas.

How do I calculate bus factor for sensitive modules in a codebase?

Calculate bus factor for sensitive modules by building an ownership map from git history to compute ownership risk. This identifies high-risk areas where few people own critical code paths.

Do I need Python 3 and networkx to generate security ownership graphs?

Yes, you need Python 3 and networkx to produce graph data for security ownership mapping. These dependencies are required to build the ownership graph and export artifacts for analysis.

Can I export git ownership data to Neo4j or Gephi for security governance?

Yes, you can export git ownership data to Neo4j or Gephi by generating CSV or JSON graph artifacts. These exports enable security teams to visualize ownership maps and conduct governance analysis.

What's the best way to audit a large codebase for security ownership and risk hotspots?

The best way to audit a large codebase for security ownership is running a one-shot ownership map generator to identify owners of sensitive modules. This produces risk reports and surfaces high-risk areas for security teams.