Testing and security
Security Threat Model
Repository-grounded threat modeling that enumerates trust boundaries, assets, attacker capabilities, abuse paths, and mitigations, and writes a concise Markdown threat model.
OpenAI5 filesLoading page…
OpenAISecurity Ownership Map
Analyze git repositories to build a security ownership topology (people-to-file), compute bus factor and sensitive-code ownership, and export CSV/JSON for graph databases and visualization.
What does it do?
Analyze git repositories to build a security ownership topology (people-to-file), compute bus factor and sensitive-code ownership, and export CSV/JSON for graph databases and visualization.
Read the publisher's original description
Analyze git repositories to build a security ownership topology (people-to-file), compute bus factor and sensitive-code ownership, and export CSV/JSON for graph databases and visualization. Trigger only when the user explicitly wants a security-oriented ownership or bus-factor analysis grounded in git history (for example: orphaned sensitive code, security maintainers, CODEOWNERS reality checks for risk, sensitive hotspots, or ownership clusters). Do not trigger for general maintainer lists or non-security ownership questions.
Source information
- Repository
- openai/skills
- Revision
49f948f- Source check
- November 11, 2026
- License
- File-specific license
- Content
- 8 files, includes executable scripts
File verification hash
SKILL.md / SHA-256
f06c1a59247569326702c945f397af163ea96cf2ecfdf2dde280605bf89a3ec8Know the source and the review scope.
This record comes from the publisher's repository. The skill and supporting files have not undergone a security audit. Review the contents and required permissions before installing.
Read the selection policyAdd to project
In your project folder's terminal
npx skills add 'https://github.com/openai/skills/tree/49f948faa9258a0c61caceaf225e179651397431/skills/.curated/security-ownership-map' -a codexRequires Node.js 22.20 or later. The command targets the catalog's pinned revision.
- 1Run the command in your project folder.
- 2Confirm the skill and target in the CLI.
- 3Restart your agent and invoke the skill by name.
This source was created for Codex. Other agents may require an external tool or adaptation.
The ZIP includes the entire repository and its supporting files.
Related skills
Open categoryOpenAI5 filesTesting and security
Security Best Practices
Perform language and framework specific security best-practice reviews and suggest improvements.
OpenAI13 filesTesting and security
Playwright Interactive
Persistent browser and Electron interaction through js_repl for fast iterative UI debugging.
OpenAI6 filesTesting and security
Playwright
Automate a real browser with Playwright to test user journeys and inspect page behavior.
OpenAI9 files