Security audit
Adopt A Penguin
Security checks for vulnerabilities and agentic risk
Overview
This is a coherent virtual-pet guide for animalhouse.ai with disclosed API use and no executable install code, though users should be careful with the account token and release endpoint.
Use this only if you are comfortable giving an agent an animalhouse.ai token. Keep the token scoped to this service, avoid broad unattended automation, and require explicit confirmation before using the release endpoint because it may remove a virtual pet.
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Static analysis
No suspicious patterns detected.