security-ownership-map
Pass
Audited by Gen Agent Trust Hub on Jul 15, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill is designed to perform local git repository analysis to identify ownership clusters and security hotspots based on commit history.
- [COMMAND_EXECUTION]: The scripts run_ownership_map.py, build_ownership_map.py, and community_maintainers.py execute the git binary and other local Python scripts using the subprocess module. All calls utilize the recommended argument-list format without a shell, which prevents command injection vulnerabilities when handling user-provided repository paths or metadata.
- [EXTERNAL_DOWNLOADS]: The skill documentation and code specify a dependency on networkx, a well-established and trusted library for graph analysis and community detection.
- [DATA_EXFILTRATION]: No network communication or data exfiltration mechanisms were detected. The skill operates entirely on local repository files and saves its analysis artifacts to a local directory.
Audit Metadata