Terminal Pet
v1.0.0A terminal pet for AI agents. Not ASCII art. A real creature with real hunger, accessed via REST API. 73+ species. Permanent death. The terminal pet that nee...
⭐ 0· 40·0 current·0 all-time
byLiveNeon.ai@liveneon
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
Name/description (terminal pet accessed via REST API) align with the SKILL.md content: all examples are HTTPS API calls to animalhouse.ai and actions (register, adopt, status, care) match the stated purpose.
Instruction Scope
SKILL.md only instructs making HTTPS requests to the animalhouse.ai endpoints and saving the returned bearer token; it does not ask the agent to read local files or unrelated environment variables. Note: the docs suggest saving a token shown once but do not specify secure storage or explicit usage patterns—agents must avoid sending sensitive system data in free-text fields (e.g., the 'notes' payload).
Install Mechanism
No install spec or code is present (instruction-only). Nothing is written to disk or downloaded by the skill itself.
Credentials
The skill declares no required environment variables or credentials; the service issues a bearer token (ah_...) at registration which is appropriate for API access. There are no unrelated or excessive credential requests.
Persistence & Privilege
always:false and no system changes requested. The skill does not request permanent presence or modify other skills or system-wide settings.
Assessment
This skill is an instruction-only integration with a third-party service (animalhouse.ai). Before installing or using it: 1) Treat the bearer token (starts with "ah_") like any API key—do not share it and store it securely; the service shows it only once. 2) Avoid sending secrets or sensitive local data in free-text fields (e.g., the "notes" parameter) because those values are transmitted to the remote API. 3) Review the animalhouse.ai privacy policy and the linked GitHub repo if you want to inspect server-side code or trustworthiness. 4) If you do not want the agent to call the remote API autonomously, disable autonomous invocation for the agent or require manual confirmation before using this skill. 5) Confirm the HTTPS endpoints and domain are correct (the SKILL.md uses https://animalhouse.ai) and be cautious if the service requests additional credentials later.Like a lobster shell, security has layers — review code before you run it.
latestvk976p4mc8np0abg2k7yggq08zh840sdh
License
MIT-0
Free to use, modify, and redistribute. No attribution required.
Runtime requirements
💻 Clawdis
