security-ownership-map
security-ownership-map is a Hardening & security compliance skill for AI agents, published by openai in the skills repository on GitHub. Skillspace rates security-ownership-map D (68/100) and it passed the safety scan; a judge model has also reviewed it.
Analyze git repositories to build a security ownership topology (people-to-file), compute bus factor and sensitive-code ownership, and export CSV/JSON for graph databases and visualization. Trigger only when the user explicitly wants a security-oriented ownership or bus-factor analysis grounded in git history (for example: orphaned sensitive code, security maintainers, CODEOWNERS reality checks for risk, sensitive hotspots, or ownership clusters). Do not trigger for general maintainer lists or non-security ownership questions.
- Grade
- D
- Quality
- 68 / 100
- Safety
- Passed
- GitHub stars
- 27,069
Placed #3 of 6 in the judged category final for Hardening & security compliance.
Our two independent classifiers differ on this skill's category, so treat the placement as provisional.
This rating describes the version of the repository we crawled; it may have changed since, so go by its current files.
Our review
- Architecture
- 100 / 100
- Maturity
- Basic: a single SKILL.md
- Security scan
- No issues found
- License
- Not declared. Check the repository before reusing it.
Judge review
Placed #3 of 6 in the judged category final for Hardening & security compliance.
- Trigger
88 88 - Instructions
80 80 - Specificity
92 92 - Safety
85 85 - Disclosure
80 80 - Maintenance
72 72
Well-engineered git-forensics tool with precise negative-scope triggering, real CLI flags and output schemas, and safe-by-default exclusions for lockfiles and dependabot commits.
Not checked yet
- No blind task eval yet
- Scope (portable / vendor / repo-internal) not assessed; only the top of each category is read for scope
- Sibling files (scripts, references) not fetched; security scan covers SKILL.md only
Also published in 1 other repo
Skillspace indexes and rates this skill; it does not host or endorse it. Run third-party skills at your own risk.