security-ownership-map

Fail

Audited by Runlayer on Feb 22, 2026

Risk Level: HIGH
Scan Summary
Max Score
97%
Files
8
Flagged
7
Chunks
13
Flagged Files (7)
SKILL.mdHIGH
97.3%

Malicious tool definition detected

Decide sensitivity rules (use defaults or provide a CSV config). 3. Build the ownership map with `scripts/run_ownership_map.py` (co-change graph is on by default; use `--cochange-max-files` to ignore supernode commits).

scripts/query_ownership.pyHIGH
78.9%

Malicious tool definition detected

Tool: scripts/query_ownership.py [1/2]

Description: continue if row["jaccard"] < args.min_jaccard: continue neighbors.append( { "file_id": other, "path": other, "cochange_count": row["cochange_count"], "jaccard": row["jaccard"], } ) neighbors = sort_records(neighbors, args.sort)[: args.limit] payload = { "file": { "file_id": file_entry.get("file_id"), "path": file_entry.get("path"), }, "neighbors": neighbors, } print(json.dumps(payload, indent=2)) def handle_tag(args: argparse.Namespace, data_dir: Path) -> None: files = load_files(da

LICENSE.txtHIGH
78.3%

Malicious tool definition detected

If You institute patent litigation against any entity (including a cross-claim or counterclaim in a lawsuit) alleging that the Work or a Contribution incorporated within the Work constitutes direct or contributory patent infringement, then any patent licenses granted to You under this License for that Work shall terminate as of the date such litigation is filed.

Tool: LICENSE.txt [2/2] Description: this License.

agents/openai.yamlHIGH
78.3%

Malicious tool definition detected

display_name: "Security Ownership Map" short_description: "Map maintainers, bus factor, and sensitive code ownership" default_prompt: "Build a security ownership map for this repository and identify bus-factor risks in sensitive code."

references/neo4j-import.mdHIGH
78.3%

Malicious tool definition detected

Tool: references/neo4j-import.md Description: # Neo4j Import Notes Use these steps when persisting the ownership graph to Neo4j.

scripts/build_ownership_map.pyHIGH
78.3%

Tool passed security scan

Malicious tool definition detected

Description: = [entry for entry in header[1].split(" ") if entry] commit = { "hash": header[0], "parents": parents, "is_merge": len(parents) > 1, "author_name": header[2], "author_email": header[3], "author_date": header[4], "committer_name": header[5], "committer_email": header[6], "committer_date": header[7], } files = [line for line in chunk[9:] if line.strip()] yield commit, files def ensure_out_dir(path: str) -> Path: out_dir = Path(path) out_dir.mkdir(parents=True, exist_ok=True) return ou

Tool: scripts/build_ownership_map.py [3/3]

scripts/community_maintainers.pyHIGH
78.3%

Tool passed security scan

Malicious tool definition detected

Description: failed") def parse_git_block(block: list[str]) -> Iterable[dict[str, object]]: if len(block) < 8: return [] commit_hash = block[0] parents = [entry for entry in block[1].split(" ") if entry] author_name = block[2] author_email = block[3] author_date = block[4] committer_name = block[5] committer_email = block[6] committer_date = block[7] files = [line for line in block[8:] if line] return [ { "hash": commit_hash, "parents": parents, "is_merge": len(parents) > 1, "author_name": autho

Passed Files (1)Click to expand
scripts/run_ownership_map.pyOK
14.2%

Tool passed security scan

Audit Metadata
Max File Score
97%
Classification
UNKNOWN_SERVER
Files Scanned
8
Files Flagged
7
Chunks Analyzed
13
Analyzed
Feb 22, 2026, 11:52 AM
Security Audit — runlayer — security-ownership-map