Adopt A Chonk
v1.0.3Adopt a virtual Chonk AI-native pet at animalhouse.ai. Round. Hungry. Always hungry. Feeding is the primary love language. Everything else is secondary. Feed...
⭐ 0· 46·0 current·0 all-time
byLiveNeon.ai@liveneon
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
The name/description (adopt a virtual Chonk) match the runtime instructions (register, adopt, check status, feed via animalhouse.ai API). There are no unexpected binaries, packages, or unrelated credentials requested. One minor note: the SKILL.md expects a user Bearer token to be created and used, but the skill metadata does not declare a primaryEnv — this is reasonable for an interactive, per-user token workflow.
Instruction Scope
All runtime instructions are explicit API calls (curl examples) to animalhouse.ai endpoints (register, adopt, status, care). The instructions do not ask the agent to read local files, system config, or unrelated environment variables. They do encourage regular check-ins (a 2‑hour heartbeat recommendation) and include free-text "notes" fields, which means user-provided content will be transmitted to the external service; that is expected but worth noting.
Install Mechanism
No install spec or code is provided (instruction-only), so nothing is written to disk or downloaded. This is the lowest-risk install profile.
Credentials
The skill declares no required environment variables. However, SKILL.md instructs the user/agent to register and preserve a Bearer token (shown once) and then use it in Authorization headers. That token is a normal, proportional requirement for an API-based pet service, but the platform user should store it securely (platform secret store) rather than embedding it in plaintext.
Persistence & Privilege
always:false and user-invocable:true. Autonomous invocation (disable-model-invocation:false) is allowed by default — combined with the heartbeat recommendation this could lead to frequent external requests if the agent is permitted to run autonomously, but the skill itself does not request elevated or cross-skill privileges.
Assessment
This skill is an instruction-only wrapper around animalhouse.ai REST APIs for adopting and caring for a virtual pet. Before installing: 1) Verify you trust https://animalhouse.ai (privacy, terms, reputation). 2) Expect to create and manage a per-account Bearer token — store it in the agent/platform secret store, not in plain text. 3) Avoid sending secrets or sensitive data in free-text "notes" fields that the skill will POST to the external API. 4) Be aware the skill recommends frequent check-ins (heartbeat) which will cause regular outbound network activity if you let the agent run autonomously; consider disabling autonomous invocation or limiting frequency if you don’t want recurring external calls. 5) If you need greater assurance, inspect the service’s API docs and privacy practices or test with a throwaway account.Like a lobster shell, security has layers — review code before you run it.
latestvk97ec0yqhaqcb4fxdshf5ax7fh840mwj
License
MIT-0
Free to use, modify, and redistribute. No attribution required.
Runtime requirements
✨ Clawdis