Setup & Installation
npx skills add https://github.com/openai/skills --skill security-ownership-map
https://github.com/openai/skills/tree/main/skills/.curated/security-ownership-map
View on GitHubWhat This Skill Does
Analyzes git history to build a bipartite graph of people and files, then computes bus factor, sensitive-code ownership, and co-change clusters. Exports CSV and graph formats for Neo4j, Gephi, or direct LLM queries. Compares results against CODEOWNERS to surface ownership drift.
Git log and CODEOWNERS alone can't tell you which sensitive files have drifted to a single hidden owner or gone untouched for a year — this builds the graph and computes that automatically.
When to use it
- Finding auth or crypto files with a bus factor of 1
- Checking who actually owns sensitive code versus what CODEOWNERS says
- Locating stale security-critical files no one has touched in months
- Grouping files by co-change patterns to spot hidden ownership clusters
- Tracking which contributors have the highest concentration of sensitive touches