security-ownership-map
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- Command Execution: The skill utilizes the
subprocessmodule to rungit logand other git commands to analyze repository history. While executing shell commands requires careful handling, the skill uses structured argument lists, which effectively prevents typical command injection vulnerabilities. - External Library Usage: The skill recommends installing
networkx, a widely used and trusted library for graph analysis. This dependency is necessary for computing code ownership communities and bus factors. - Local Data Processing: All repository analysis and artifact generation occur locally. The skill does not exhibit patterns for data exfiltration or unauthorized network communication.
Audit Metadata