Coding Tamagotchi

• Risk level: Low
• Analyzed: Apr 1, 2026, 6:49 AM
• Findings: 0
• Version: 1.0.0

Overview

The skill is an instruction-only wrapper for a virtual-pet web service (animalhouse.ai); its instructions, required actions, and external endpoints are coherent with the stated purpose and it does not request unrelated credentials or install code.

This skill appears to be what it says: a thin set of instructions for interacting with animalhouse.ai. Before installing, verify the animalhouse.ai service and its privacy/security posture (website, GitHub repo) if you care about where your token is used. Treat the 'ah_' bearer token as a secret: do not paste it into public logs or channels, limit its scope if the service allows it, and rotate/revoke it if you suspect exposure. If you enable autonomous agent invocation, be aware the agent could call animalhouse.ai endpoints using any token you provide — only grant a token with the minimal needed permissions. If you want stricter control, keep the token out of agent-wide environment variables and provide it manually when invoking the skill.