What is a 'Bus Factor' in this context?

The Bus Factor represents the minimum number of developers who must leave the project before a specific part of the codebase (especially sensitive files) becomes unmaintained or a security risk.

How can I visualize the ownership data?

The skill exports GraphML and CSV files specifically formatted for easy import into graph database tools like Neo4j or visualization software like Gephi.

Can I customize what files are considered 'sensitive'?

Yes, you can provide a custom CSV configuration file to define specific path patterns for authentication, cryptography, or secret-heavy directories.

Does it exclude automated bot commits?

By default, common bots like Dependabot are excluded, and you can provide custom regex patterns to filter out other automated authors.

Does this skill require external tools?

It requires Python 3 and the NetworkX library for graph computation and community detection within your local environment.

Security Ownership Map & Git Risk Analyzer

Name: Security Ownership Map & Git Risk Analyzer
Author: YPYT1

byYPYT1

•

安全与测试

Analyzes Git history to map code ownership, identify security risks like low bus factors, and visualize developer-to-file topologies.

This skill provides deep insights into repository security by mapping the relationship between developers and sensitive codebases. By analyzing Git commit history, it calculates the 'bus factor' for critical components, identifies orphaned or high-risk sensitive files, and detects hidden ownership patterns that could pose security risks. It generates comprehensive graph data compatible with Neo4j and Gephi, allowing teams to visualize knowledge silos and ensure that critical security infrastructure—such as authentication and cryptography modules—has adequate maintainer coverage and doesn't rely on a single individual.

主要功能

01Detects co-change clusters to reveal how code modules evolve together

02Exports data to CSV, JSON, and GraphML for Neo4j and Gephi visualization

03Automated flagging of sensitive auth/crypto paths with customizable rules

04Calculates 'Bus Factor' and identifies orphaned sensitive code hotspots

052 GitHub stars

06Maps people-to-file ownership topology directly from Git history

使用场景

01Identifying critical security files with only one maintainer to mitigate knowledge loss

02Visualizing knowledge silos and developer clusters in large-scale legacy repositories

03Auditing repository ownership drift by comparing Git reality against CODEOWNERS files

What are Skills?·How to Install

Install with 🐟 Skill.Fish

npx skillfish add ypyt1/all-skills openai-skills

For use in Claude.ai and ChatGPT

Download Skill