Pywayne Bin Gitstats

PassAudited by ClawScan on May 1, 2026.

Overview

This is a straightforward Git commit-statistics helper, with minor cautions about trusting the local gitstats command and avoiding unintended output-file overwrites.

Before installing or using this skill, make sure the gitstats command and its dependencies are installed from a trusted source. Use it only on repositories you intend to analyze, and choose an output filename that will not overwrite something important.

Findings (2)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

If used carelessly, it could analyze the wrong repository or overwrite an existing chart file.

Why it was flagged

The skill directs use of a local CLI that reads a selected Git repository and can write or overwrite an output image. This is aligned with the skill purpose, but the repository scope and save path should be chosen intentionally.

Skill content
gitstats /path/to/repo ... gitstats --all ... --save | Output image path ... Output file is overwritten if it exists
Recommendation

Run it only in the intended repository, specify a safe output path, and review before using --all or saving over an existing file.

What this means

The skill will rely on whatever matching local command is available, so an untrusted or unexpected installation could affect results or behavior.

Why it was flagged

The package does not provide installation or provenance details for the local tooling it expects the user environment to supply. This is not suspicious by itself, but users should verify that the gitstats/Git tooling on their system is trusted.

Skill content
Source: unknown ... No install spec — this is an instruction-only skill ... Required binaries (all must exist): none
Recommendation

Install gitstats, Git, and related Python dependencies from trusted sources, and confirm the command being run is the expected one.