Buddy Buddy
v1.0.0Anthropic leaked a companion system called Buddy inside Claude Code. 18 ASCII species. At animalhouse.ai, the Buddy is real. 73+ species. Real-time hunger. P...
⭐ 0· 72·0 current·0 all-time
byLee Brown@leegitw
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
Name/description (virtual pet companion tied to animalhouse.ai) match the SKILL.md content: all examples, endpoints, and actions target animalhouse.ai and are appropriate for a Tamagotchi-style service. No unrelated services, binaries, or credentials are requested.
Instruction Scope
SKILL.md instructs the agent/user to register, obtain a bearer token (ah_...), adopt a creature, check status, and POST care actions to animalhouse.ai. The instructions do not ask the agent to read local files or other env vars, but they do instruct that the token be saved — the skill does not declare where/how to persist the token, so users should ensure they store it securely and avoid accidental leakage.
Install Mechanism
No install spec or code files are present (instruction-only). There is no download or archive extraction and nothing is written to disk by the skill itself.
Credentials
The skill requests no environment variables in its metadata, but runtime instructions require a bearer token supplied by the user. This is proportional to the service (API token for animalhouse.ai) but the metadata does not declare a primaryEnv variable; users should treat the token as sensitive and avoid placing it in insecure storage or reusing a token that grants broader access.
Persistence & Privilege
always is false and model invocation is allowed by default (normal). The skill does not request persistent system-level presence, nor does it instruct modifying other skills or system configs.
Assessment
This skill is coherent with its stated purpose: it is a set of instructions for interacting with animalhouse.ai. Before installing or using it: (1) verify https://animalhouse.ai is the site you expect and that you trust the service; (2) treat the bearer token (starts with ah_) as a secret — store it securely and do not paste it in public channels; (3) be aware actions create public-facing artifacts (graveyard/public pages) per the description; (4) the skill will make network requests to animalhouse.ai when invoked — if you do not want autonomous calls, disable model invocation or only use the skill interactively; (5) the SKILL.md does not define where the token should be stored, so ensure your agent's credential storage is configured to keep it private.Like a lobster shell, security has layers — review code before you run it.
latestvk97cd90b2k6y8jckqgr4bqssc5840e0s
License
MIT-0
Free to use, modify, and redistribute. No attribution required.
Runtime requirements
🐾 Clawdis
