SKILL

security-ownership-map

分析 git 仓库以构建安全归属拓扑(人员到文件),计算巴士因子和敏感代码归属,并导出 CSV/JSON 供图数据库和可视化使用。仅在用户明确要求基于 git 历史进行面向安全的归属或巴士因子分析时触发(例如:孤立敏感代码、安全维护者、针对风险的 CODEOWNERS 实际情况核查、敏感热点或归属集群)。不要为一般维护者列表或非安全归属问题触发。

机器翻译
查看英文原文

Analyze git repositories to build a security ownership topology (people-to-file), compute bus factor and sensitive-code ownership, and export CSV/JSON for graph databases and visualization. Trigger only when the user explicitly wants a security-oriented ownership or bus-factor analysis grounded in git history (for example: orphaned sensitive code, security maintainers, CODEOWNERS reality checks for risk, sensitive hotspots, or ownership clusters). Do not trigger for general maintainer lists or non-security ownership questions.

适用对象:云服务、运维与安全。自动收录 · 待核查。

原作者说明节选

从固定版本的 SKILL.md 提取,保留原文语言。以下内容属于作者说明,本站尚未验证安装、兼容或运行结果。

查看英文原文

原文涵盖的主题

  • Security Ownership Map
  • Overview
  • Requirements
  • Workflow
  • Quick start
  • Sensitivity rules
  • Output artifacts
  • LLM query helper

Build a bipartite graph of people and files from git history, then compute ownership risk and export graph artifacts for Neo4j/Gephi. Also build a file co-change graph (Jaccard similarity on shared commits) to cluster files by how they move together while ignoring large, noisy commits. Python 3 networkx (required; community detection is enabled by default) Install with: 1. Scope the repo and time window (optional --since/--until). 2. Decide sensitivity rules (use defaults or provide a CSV config). 3. Build the ownership map with scripts/runownershipmap.py (co-change graph is on by default; use --cochange-max-files to ignore supernode commits). 4. Communities are computed by default; graphml output is optional (--graphml). 5. Query the outputs with scripts/queryownership.py for bounded JSON slices. 6. Persist and visualize (see references/neo4j-import.md). By default, the co-change graph ignores common “glue” files (lockfiles, .github/, editor config) so clusters reflect actual code movement instead of shared infra edits. Override with --cochange-exclude or --no-default-cochange-excludes. Dependabot commits are excluded by default; override with --no-default-author-excludes or add p

这里只展示节选,请以完整原文和当前要求为准。

来源仓库
davila7/claude-code-templates
源文件
cli-tool/components/skills/security/security-ownership-map/SKILL.md
固定版本
21be197f100a12b8d0dd9a211cc244c8179f84d3
阅读完整原作者说明 ↗

来源与内容状态

本条为自动发现的元数据,尚未完成人工文档核查;适用性与运行结果待核查。

原作者:davila7/claude-code-templates · 原作者仓库元数据。文档核查:未核查。最近来源检查:2026-11-09T15:01:40.597Z。

分类由名称、说明与路径规则生成,分类不代表已核实适配。

许可与权利归属

MIT。第三方内容及版权归原作者,使用条件以原文为准。

许可原文 ↗

本站没有因同步、复制或用户自报成功而将资源标为运行验证通过。

限制与注意事项

  • 元数据收录不代表本站已经安装、适配、实测或进行安全审查。