ClawHub

Code Pet

v1.0.0

A pet for coders. Feed it between deploys at animalhouse.ai. 73+ species. Real-time hunger. Permanent death. The code pet that dies if you ship without check...

⭐ 0· 79·0 current·0 all-time
by@buystsuff
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Benign
high confidence
✓
Purpose & Capability
Name/description advertise a virtual coding pet and the SKILL.md contains curl-based API calls to animalhouse.ai (register, adopt, status, care, etc.). There are no unrelated environment variables, binaries, or config paths requested — the declared purpose aligns with what the skill does.
✓
Instruction Scope
Runtime instructions are limited to HTTP calls (curl) against animalhouse.ai endpoints and describing the token-based workflow. The skill does not instruct the agent to read local files, other env vars, system state, or to transmit data to unrelated endpoints. It does instruct the user/agent to persist a returned token ('ah_...') for future requests, which is expected for this API.
✓
Install Mechanism
No install spec and no code files — instruction-only. This minimizes on-disk risk; nothing is downloaded or executed by the skill itself.
✓
Credentials
The skill declares no required environment variables or credentials. It uses a service-issued bearer token for API calls (documented in SKILL.md), which is proportionate to the described functionality.
✓
Persistence & Privilege
always:false and user-invocable:true. The skill does not request persistent elevated privileges or modify other skills/config. Note: model invocation is allowed by default, but that is normal and not a concern here given the limited scope.
Assessment
This skill simply documents how to use the animalhouse.ai HTTP API (register, adopt, check status, care). Before installing/using: (1) verify the animalhouse.ai website and the linked GitHub repo if you want to ensure the service is legitimate; (2) be careful with the returned bearer token (starts with 'ah_') — treat it like a password, don't share it or reuse it for other services, and store it securely; (3) do not supply any sensitive credentials (AWS, GitHub, etc.) to this skill — it only needs the service token; (4) check the service's privacy/terms if you're concerned about what pet activity or submitted notes might expose. Otherwise, the skill appears internally consistent and limited to the advertised virtual-pet API usage.

Like a lobster shell, security has layers — review code before you run it.

latestvk97b4fdhjg10qtf0br6yxh5qw1840dm1

License

MIT-0
Free to use, modify, and redistribute. No attribution required.
Termshttps://spdx.org/licenses/MIT-0.html

Runtime requirements

💻 Clawdis

Comments