security-ownership-map

Analyze git history to map security ownership and calculate bus factors.

Updated Mar 14, 2026
One-click install
npx skills add https://github.com/thanhquan3010/hospital-management-system-v3 --skill security-ownership-map-thanhquan3010
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: security-ownership-map
Source: https://github.com/thanhquan3010/hospital-management-system-v3/tree/main/.agents/skills/security-ownership-map
Command: npx skills add https://github.com/thanhquan3010/hospital-management-system-v3 --skill security-ownership-map-thanhquan3010

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill requires networkx, and includes scripts (resource) and references (resource) and assets (resource) components.

What problem does it solve?

This Skill helps identify security risks in codebases by analyzing git history to map who owns what code, calculate bus factors, and detect sensitive code ownership.

Core Features & Use Cases

  • Security Ownership Topology: Builds a graph of people and files from git history.
  • Bus Factor Calculation: Computes the minimum number of people needed to change a file or module.
  • Sensitive Code Analysis: Identifies ownership of authentication, crypto, and secrets-related files.
  • Graph Export: Generates CSV/JSON outputs for visualization tools like Neo4j and Gephi.
  • Use Case: Detect orphaned sensitive code, perform CODEOWNERS reality checks for risk assessment, or identify security hotspots with low bus factors.

Quick Start

Run the security ownership map script from your repository root to analyze the current directory's git history.

Frequently Asked Questions about security-ownership-map

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I calculate the bus factor for my codebase using git history?

Calculating the bus factor using git history requires analyzing commit patterns to find the minimum number of maintainers needed for specific files or modules. This skill processes your repository to compute that exact risk metric.

What is a security ownership topology and how does it identify risks?

A security ownership topology maps relationships between developers and files extracted from git history to identify security risks. It highlights sensitive code areas, such as authentication or crypto modules, and detects orphaned code lacking active maintainers.

How do I check if my CODEOWNERS file matches the actual git history?

Checking if your CODEOWNERS file matches reality requires performing a reality check by comparing documented owners against actual commit data. This skill analyzes git history to reveal discrepancies between assigned and active maintainers.

Can I export git code ownership data for visualization in Neo4j or Gephi?

Exporting git code ownership data for visualization in Neo4j or Gephi requires generating structured graph outputs. This skill exports the analyzed security topology and ownership data in CSV and JSON formats specifically designed for graph databases.

Does this git security analysis require specific dependencies to run?

Running this git security analysis requires the networkx dependency to construct the graph topology of people and files. You execute the analysis script directly from your repository root to process the current directory's commit history.

How do I identify orphaned sensitive code in my repository?

Identifying orphaned sensitive code in your repository requires analyzing git history to map ownership of authentication, crypto, and secrets-related files. This skill detects sensitive modules lacking sufficient active maintainers or having a low bus factor.