BUDDY 宠物系统
v1.0.0BUDDY 宠物系统 - 一个虚拟宠物伴侣工具，用于生成、互动、展示 AI 宠物。当用户说"摸摸宠物"、"查看宠物"、"孵化宠物"、"buddy"、"/buddy pet"、"/buddy card"、"/buddy hatch"、"/buddy mute"、"/buddy unmute" 或任何与宠物互动相关的...
⭐ 0· 89·0 current·0 all-time
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
Name/description (virtual pet companion) match the included files and runtime behavior. All code implements pet generation, ASCII sprites, CLI commands, and state handling — functionality expected for this purpose. One minor mismatch: the scripts use the 'bun' runtime (shebang and usage in SKILL.md) but 'bun' is not declared in the skill's required binaries metadata.
Instruction Scope
SKILL.md directs running the included CLI (bun scripts/buddy.ts) and describes triggers and commands; the instructions stay within the pet domain. The skill also prints an 'AI context injection' prompt that tells the agent to add pet state to its conversation context when the pet is present — this is intended behavior but does modify how the agent will respond. SKILL.md assumes the path /root/.openclaw/skills/buddy for execution, which is an installation-path assumption to be aware of.
Install Mechanism
No install spec (instruction-only) and included code files are present; nothing downloads or installs third-party packages. The runtime will execute local TypeScript/JS via bun; since there is no network download step or extraction from external URLs, install risk is low. Ensure you trust and review the included code before executing it locally.
Credentials
The skill requests no environment variables or credentials. Runtime code only reads/writes a local state file (/tmp/buddy-state.json) and does not access other system config, secrets, or network. The level of environment access is proportionate to the pet functionality.
Persistence & Privilege
always:false (no forced global inclusion). The skill persists minimal state to /tmp (muted flag and an optional savedPet). It does not modify other skills' configs or system-wide settings. Autonomous invocation (model invocation enabled) is normal for skills and not by itself a concern here.
Assessment
This skill appears coherent and local: it contains code that will run on the agent host (bun scripts/buddy.ts) and stores small state in /tmp/buddy-state.json. Before installing/running, verify you have the 'bun' runtime (the skill expects to be invoked with bun but does not declare it as a required binary), review the included files you see here (they implement the pet behavior), and be aware the skill prints an AI context-injection prompt that will alter agent responses when a pet is present (intended for the feature but it influences agent behavior). There are no network calls or credential requests in the code, so there is no obvious exfiltration risk, but only run code from sources you trust.Like a lobster shell, security has layers — review code before you run it.
asciivk9705kwz0dcvczm52egvjt5es1844jg2gamevk9705kwz0dcvczm52egvjt5es1844jg2latestvk9705kwz0dcvczm52egvjt5es1844jg2petvk9705kwz0dcvczm52egvjt5es1844jg2virtual-petvk9705kwz0dcvczm52egvjt5es1844jg2
License
MIT-0
Free to use, modify, and redistribute. No attribution required.