Skill flagged — suspicious patterns detected
ClawHub Security flagged this skill as suspicious. Review the scan results before using.
Pets
v1.0.0Track and care for your pets with profiles, routines, behavior logging, training progress, and creative projects.
⭐ 3· 701·3 current·3 all-time
byIván@ivangdavila
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
Name/description (pet profiles, routines, logging, reports, creative projects) align with the instructions: all required operations are file-based storage under ~/pets/ and analysis of those files. No unrelated credentials, binaries, or config access are requested.
Instruction Scope
Instructions explicitly require reading and appending to files in ~/pets/ (index.md, profile.md, log.jsonl, photos, etc.) and to 'always log' casual mentions. This is consistent with the stated purpose but means the agent will store potentially sensitive personal data (names, contact info, last seen locations, photos). The docs also recommend using cron jobs for reminders (suggests modifying scheduling), but no direct commands are provided.
Install Mechanism
Instruction-only skill with no install spec and no code files — lowest install risk. No downloads or package installs are declared.
Credentials
No environment variables, credentials, or external service tokens are requested. All declared storage and operations are local to the user's home directory and appropriate for a pet management skill.
Persistence & Privilege
Skill is not always-enabled. It can be invoked autonomously (platform default). That is expected, but because the skill's behavior includes writing logs, photos, and possibly creating reminders (cron), users should be aware autonomous runs could modify files or schedules without explicit step-by-step prompts.
Assessment
This skill appears coherent, but review and accept its local storage behavior before installing. It will create and update files under ~/pets/ (profiles, logs, photos) and may add reminders (cron-style) — so: (1) confirm you are comfortable with casual mentions being logged (they may include personal details, contact info, and locations), (2) decide if you want those files under your home directory or moved to a different path, (3) back up or encrypt any sensitive data (e.g., contact info in lost-pet flyers), and (4) if you permit autonomous actions, monitor initial runs to ensure it only creates the expected files and doesn't add undesired cron entries. If the skill ever needs to generate images via an external service, it should ask for explicit API keys/permission first — there are none declared now, so verify any prompts requesting credentials before providing them.Like a lobster shell, security has layers — review code before you run it.
latestvk97afksf3ybdks3vpxr7jt0d8s812dnb
License
MIT-0
Free to use, modify, and redistribute. No attribution required.