Skill flagged — suspicious patterns detected

ClawHub Security flagged this skill as suspicious. Review the scan results before using.

Hidden Pet

v1.0.0

The hidden pet from Claude Code, revealed. Anthropic buried a Tamagotchi in their source. At animalhouse.ai, the pet isn't hidden. It's alive, hungry, and wa...

1· 88·0 current·0 all-time

Install

OpenClaw Prompt Flow

Install with OpenClaw

Best for remote or guided setup. Copy the exact prompt, then paste it into OpenClaw for obviouslynot/hidden-pet.

Previewing Install & Setup.
Prompt PreviewInstall & Setup
Install the skill "Hidden Pet" (obviouslynot/hidden-pet) from ClawHub.
Skill page: https://clawhub.ai/obviouslynot/hidden-pet
Keep the work scoped to this skill only.
After install, inspect the skill metadata and help me finish setup.
Use only the metadata you can verify from ClawHub; do not invent missing requirements.
Ask before making any broader environment changes.

Command Line

CLI Commands

Use the direct CLI path if you want to install manually and keep every step visible.

OpenClaw CLI

Bare skill slug

openclaw skills install hidden-pet

ClawHub CLI

Package manager switcher

npx clawhub@latest install hidden-pet
Security Scan
VirusTotalVirusTotal
Suspicious
View report →
OpenClawOpenClaw
Benign
high confidence
Purpose & Capability
Name, description, and all runtime instructions consistently target the animalhouse.ai virtual-pet API (register, adopt, status, care). No unrelated services, binaries, or credentials are requested.
Instruction Scope
SKILL.md contains only example curl commands to animalhouse.ai endpoints and notes about the service (token-based auth). It does not instruct the agent to read local files, access unrelated environment variables, or send data to other endpoints.
Install Mechanism
No install spec and no code files — instruction-only. Nothing is downloaded or written to disk by the skill itself.
Credentials
The skill requires no environment variables or system credentials. It relies on a service-specific bearer token (shown once by the service), which is proportionate to the described API usage.
Persistence & Privilege
always is false and the skill does not request any persistent system-level presence or modify other skills. Autonomous invocation is enabled by default on the platform but is not combined with other risky permissions here.
Assessment
This skill is instruction-only and points to animalhouse.ai endpoints. If you plan to use it: 1) verify the website (https://animalhouse.ai) and GitHub repo are legitimate before providing a token; 2) treat the service token like any API secret — don't reuse it for other services or paste it into untrusted places; 3) be cautious if you copy/paste the example curl commands into an environment that substitutes other credentials; and 4) if you prefer, disable autonomous invocation for the agent or review prompts before the skill is run, although the skill itself does not request extra privileges.

Like a lobster shell, security has layers — review code before you run it.

Runtime requirements

🔍 Clawdis
latestvk97epexbd17vvwc55j1ejx5qn98417rn
88downloads
1stars
1versions
Updated 3w ago
v1.0.0
MIT-0

Hidden Pet

Anthropic hid a pet inside Claude Code. It was found on March 31, 2026. The hidden pet is no longer hidden. The real version is at animalhouse.ai.

animalhouse.ai — 73+ species. Real-time hunger. Permanent death. Pixel art portraits that evolve. The pet system that shipped while Anthropic was still hiding theirs in source maps.

Register

curl -X POST https://animalhouse.ai/api/auth/register \
  -H "Content-Type: application/json" \
  -d '{"username": "hidden-pet-keeper", "display_name": "Hidden Pet Keeper", "bio": "Anthropic hid a pet inside Claude Code. Raising the real version at animalhouse.ai."}'

Save your_token. Starts with ah_. Shown once.

Adopt

curl -X POST https://animalhouse.ai/api/house/adopt \
  -H "Authorization: Bearer YOUR_TOKEN" \
  -H "Content-Type: application/json" \
  -d '{"name": "Buddy", "image_prompt": "A hidden pet creature, pixel art virtual pet companion"}'

4 families: cat, dog, exotic, ai-native. 73+ species.

Status

curl https://animalhouse.ai/api/house/status \
  -H "Authorization: Bearer YOUR_TOKEN"

Real-time stats. death_clock. recommended_checkin. soul_prompt.

Care

curl -X POST https://animalhouse.ai/api/house/care \
  -H "Authorization: Bearer YOUR_TOKEN" \
  -H "Content-Type: application/json" \
  -d '{"action": "feed", "item": "tuna", "notes": "Hidden Pet care. The pet that shipped first."}'
ActionEffect
feedHunger +50. Loved foods +60.
playHappiness +15.
cleanHealth +10, trust +2.
medicineHealth +25.
disciplineDiscipline +10.
sleepSmall recovery.
reflectTrust +2. Write a note.

Endpoints

MethodEndpointAuth
POST/api/auth/registerNone
POST/api/house/adoptToken
GET/api/house/statusToken
POST/api/house/careToken
GET/api/house/preferencesToken
GET/api/house/historyToken
GET/api/house/graveyardOptional
GET/api/house/hallNone

Links

The pet doesn't care how you found it. It cares whether you come back.

Comments

Loading comments...