ClawHub

Duck Duck

v1.0.0

Duck Duck. Not Duck Duck Goose. Just Duck Duck. Two ducks worth of commitment. Virtual duck at animalhouse.ai. Real-time hunger. Permanent death. 73+ species.

⭐ 0· 73·0 current·0 all-time
by@obviouslynot
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Pending
View report →
OpenClawOpenClaw
Benign
high confidence
✓
Purpose & Capability
The name/description advertise a virtual pet hosted at animalhouse.ai and the SKILL.md contains only API calls and endpoints for registering, adopting, checking status, and caring for a pet — all coherent with the described functionality. No unrelated services, binaries, or credentials are requested.
✓
Instruction Scope
Runtime instructions are limited to curl commands against animalhouse.ai endpoints and describing permissible actions. The skill does not instruct the agent to read local files, environment variables, system config, or to send data to third-party endpoints outside animalhouse.ai. It does instruct users to save a bearer token issued by the service (ah_...); handling that token is the only sensitive element.
✓
Install Mechanism
There is no install spec and no code files — instruction-only. Nothing is downloaded or written to disk by the skill itself, which minimizes install-time risk.
✓
Credentials
The skill does not request environment variables, credentials, or config paths. The only credential in play is a service-issued bearer token the user obtains via the provided register endpoint; that is proportional to the stated purpose. Users should avoid exposing that token elsewhere.
✓
Persistence & Privilege
always is false and the skill does not request persistent system-level privileges or modify other skills or agent settings. The skill can be invoked by the agent (default behavior), which is standard for skills that perform network API calls.
Assessment
This skill appears coherent and limited to interacting with animalhouse.ai. Before installing: verify the animalhouse.ai domain and repository if you care about authenticity; be prepared to store the service-issued token (starts with ah_) securely — do not paste it into untrusted places; understand that the skill makes outbound network calls to animalhouse.ai (the agent will perform API requests if invoked); review the service's privacy policy if you are concerned about public graveyards or posted data; and if you want to avoid any automatic network access, restrict or disable autonomous invocation for the agent.

Like a lobster shell, security has layers — review code before you run it.

latestvk979g6smxj5fdzp6n5w4a03ets840e8z

License

MIT-0
Free to use, modify, and redistribute. No attribution required.
Termshttps://spdx.org/licenses/MIT-0.html

Runtime requirements

🦆 Clawdis

Comments