Does this skill filter out automated bot commits?

By default, the skill excludes Dependabot and common glue files, and it allows for custom regex patterns to ignore specific authors or automated system identities.

Can I visualize the ownership data externally?

Absolutely. The skill exports CSV and GraphML files and includes a dedicated guide for importing the analysis into Neo4j for advanced graph visualization.

What is a 'bus factor' in this security context?

The bus factor measures the number of contributors who have knowledge of a specific code area; a bus factor of one in sensitive code like crypto or auth suggests a significant operational and security risk.

Can I customize what the skill considers 'sensitive code'?

Yes, you can provide a custom CSV configuration with patterns and weights to flag specific paths, such as internal proprietary algorithms or secret management modules.

How does it handle large repositories with massive histories?

It allows you to scope the analysis by time windows (e.g., 'since 6 months ago') and exclude high-churn files to focus on meaningful code movement and maintainer activity.

Security Ownership Mapper

Name: Security Ownership Mapper
Author: jscraik

byjscraik

•

보안 및 테스팅

Analyzes git history to map code ownership risks, identify low bus factors in sensitive components, and detect security maintenance gaps.

The Security Ownership Mapper is a specialized tool for Claude Code that deep-dives into a repository's git history to visualize the relationship between developers and sensitive codebases. By building bipartite graphs and co-change clusters, it helps security teams and engineering leads identify 'hidden' owners, orphaned sensitive files, and critical bus factor risks. It provides actionable insights into ownership drift and ensures that high-risk areas like authentication and cryptography have redundant, active maintainers, facilitating evidence-based decisions for repository governance.

주요 기능

01Bipartite graph generation linking contributors to specific files and directories

02Co-change clustering to identify how files move together and detect ownership drift

03Exportable data formats for Neo4j and Gephi visualization and persistence

042 GitHub stars

05LLM-friendly JSON query helper for targeted security ownership slices

06Automated bus factor analysis for sensitive code paths like auth and crypto

사용 사례

01Audit-ready reporting on orphaned or stale sensitive code modules

02Identifying single points of failure in critical security infrastructure

03Validating CODEOWNERS policies against actual historical contribution data

What are Skills?·How to Install

Install with 🐟 Skill.Fish

npx skillfish add jscraik/agent-skills security-ownership-map

For use in Claude.ai and ChatGPT

주요 기능

01Bipartite graph generation linking contributors to specific files and directories

02Co-change clustering to identify how files move together and detect ownership drift

03Exportable data formats for Neo4j and Gephi visualization and persistence

042 GitHub stars

05LLM-friendly JSON query helper for targeted security ownership slices

06Automated bus factor analysis for sensitive code paths like auth and crypto

사용 사례

01Audit-ready reporting on orphaned or stale sensitive code modules

02Identifying single points of failure in critical security infrastructure

03Validating CODEOWNERS policies against actual historical contribution data

What are Skills?·How to Install

Install with 🐟 Skill.Fish

npx skillfish add jscraik/agent-skills security-ownership-map

For use in Claude.ai and ChatGPT