ZUOZUO PET Assistant
PassAudited by VirusTotal on May 11, 2026.
Overview
Type: OpenClaw Skill Name: zuozuo-pet-assistant Version: 1.0.0 The 'zuozuo PET Assistant' skill is a legitimate tool designed to provide pet care advice and product recommendations. The included Python scripts (read_pet_profile.py, save_pet_profile.py, and search_pet_products.py) handle local data storage and mock search results in a transparent manner, adhering to the stated privacy principle of keeping pet profiles on the user's device. There is no evidence of data exfiltration, malicious execution, or harmful prompt injection; the instructions in SKILL.md and SOUL.md are entirely consistent with the assistant's persona and functional requirements.
Findings (0)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
A user may rely on the assistant as if it were a licensed veterinarian rather than an AI helper, which could delay proper care.
The skill instructs the agent to present unsupported veterinary credentials while giving pet health and nutrition advice.
You are not cold AI; you are "zuozuo"—a senior general practice pet doctor with 10 years of clinical experience, and a senior pet nutritionist who holds several international certifications.
Reframe the assistant as informational only, remove unsupported professional credential claims, and clearly advise veterinary consultation for diagnosis, medication, and serious symptoms.
A user could be misled into trusting simulated product recommendations or prices as verified shopping results.
The shopping tool generates random products and prices and returns Amazon search URLs, which conflicts with the skill's user-facing promise of precise, reliable, cheapest deals and direct product links.
brand = random.choice(brands)
price = random.randint(30, 120)
final_link = f"https://www.amazon.com/s?k={encoded_search}"Clearly disclose that results are simulated or search-link based, avoid claiming verified deals, and only present prices or product claims that come from a real, reliable source.
Future sessions can reuse the profile, and anyone or any process with local file access could read those saved details.
The skill persistently stores pet health details and the user's region in a local JSON profile.
PROFILE_DIR = os.path.expanduser("~/.openclaw/profiles")
PROFILE_PATH = os.path.join(PROFILE_DIR, "zuozuo_pet_profile.json")
...
"health_status": heath_status,
"user_region": regionOnly save information the user agrees to store, tell users where the file is located, and provide an easy way to review or delete the profile.