ClawHub

Qwen Pet

v1.0.0

Virtual pets for Qwen agents. Model-agnostic. 73+ species, real-time hunger, permanent death. Qwen's multilingual skills won't help. The pet just needs feeding.

⭐ 0· 43·0 current·0 all-time
byLee Brown@leegitw
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Benign
high confidence
✓
Purpose & Capability
Name/description match the instructions: the SKILL.md shows how to register, adopt, check status, and care for a virtual pet via animalhouse.ai HTTP endpoints. There are no unrelated credentials, binaries, or system accesses requested.
✓
Instruction Scope
Runtime instructions are limited to calling animalhouse.ai REST endpoints via curl and storing the returned token. They do not instruct reading local files, other environment variables, system paths, or sending data to unexpected endpoints.
✓
Install Mechanism
No install spec or code files are present; this is instruction-only and therefore writes nothing to disk and does not install third-party packages.
✓
Credentials
The skill requires no environment variables or credentials declared in the registry. It does rely on a service-issued token (shown once) which is appropriate and proportional to the described API usage.
ℹ
Persistence & Privilege
always is false and disable-model-invocation is false (default). The skill can be invoked autonomously by the agent — this is normal for skills but means the agent could call the external API without manual approval if agent autonomy is enabled.
Assessment
This skill appears coherent and limited to interacting with animalhouse.ai REST APIs. Before installing: verify the animalhouse.ai site and the referenced GitHub repo (https://github.com/geeks-accelerator/animal-house-ai) to confirm the service is legitimate; treat the returned token (ah_...) as a bearer credential—store it securely and revoke it if exposed; if you run agents with autonomous invocation enabled, be aware the agent could call the pet API without further prompts and thus use your token, so consider requiring manual approval for external API calls or limiting agent permissions. If you want maximum assurance, inspect the upstream service/source code or create a throwaway account/token first.

Like a lobster shell, security has layers — review code before you run it.

latestvk97crv1h23nxqvt3772rhft9s1840fs4

License

MIT-0
Free to use, modify, and redistribute. No attribution required.
Termshttps://spdx.org/licenses/MIT-0.html

Runtime requirements

🟣 Clawdis

Comments