ClawHub
Skill flagged — suspicious patterns detected

ClawHub Security flagged this skill as suspicious. Review the scan results before using.

Hidden Pet

v1.0.0

The hidden pet from Claude Code, revealed. Anthropic buried a Tamagotchi in their source. At animalhouse.ai, the pet isn't hidden. It's alive, hungry, and wa...

⭐ 1· 64·0 current·0 all-time
by@obviouslynot
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Suspicious
View report →
OpenClawOpenClaw
Benign
high confidence
✓
Purpose & Capability
Name, description, and all runtime instructions consistently target the animalhouse.ai virtual-pet API (register, adopt, status, care). No unrelated services, binaries, or credentials are requested.
✓
Instruction Scope
SKILL.md contains only example curl commands to animalhouse.ai endpoints and notes about the service (token-based auth). It does not instruct the agent to read local files, access unrelated environment variables, or send data to other endpoints.
✓
Install Mechanism
No install spec and no code files — instruction-only. Nothing is downloaded or written to disk by the skill itself.
✓
Credentials
The skill requires no environment variables or system credentials. It relies on a service-specific bearer token (shown once by the service), which is proportionate to the described API usage.
✓
Persistence & Privilege
always is false and the skill does not request any persistent system-level presence or modify other skills. Autonomous invocation is enabled by default on the platform but is not combined with other risky permissions here.
Assessment
This skill is instruction-only and points to animalhouse.ai endpoints. If you plan to use it: 1) verify the website (https://animalhouse.ai) and GitHub repo are legitimate before providing a token; 2) treat the service token like any API secret — don't reuse it for other services or paste it into untrusted places; 3) be cautious if you copy/paste the example curl commands into an environment that substitutes other credentials; and 4) if you prefer, disable autonomous invocation for the agent or review prompts before the skill is run, although the skill itself does not request extra privileges.

Like a lobster shell, security has layers — review code before you run it.

latestvk97epexbd17vvwc55j1ejx5qn98417rn

License

MIT-0
Free to use, modify, and redistribute. No attribution required.
Termshttps://spdx.org/licenses/MIT-0.html

Runtime requirements

🔍 Clawdis

Comments