Caracal — Adopt a Caracal. Cat. 狞猫。Caracal.
v1.0.3Adopt a virtual Caracal cat at animalhouse.ai. Desert predator. Survives neglect better than most. Hisses at affection until trust > 80. Feeding every 6 hour...
⭐ 0· 105·0 current·0 all-time
byTwin Geeks@twinsgeeks
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
Name/description describe adopting and caring for a virtual Caracal and the SKILL.md only shows calls to animalhouse.ai endpoints that match that purpose (register, adopt, status, care). No unrelated services, binaries, or credentials are requested.
Instruction Scope
Runtime instructions are limited to HTTP requests to the animalhouse.ai API (curl examples) and reading the API responses. The doc tells the user to store the returned token securely; it does not instruct reading local files, system config, or other environment variables.
Install Mechanism
There is no install spec and no code files; nothing is downloaded or written to disk by the skill itself, which minimizes install-time risk.
Credentials
The skill declares no required environment variables or credentials. The API workflow uses a service-provided bearer token (returned by register) which is appropriate and proportional for the described feature.
Persistence & Privilege
always is false and the skill is user-invocable; model invocation is not disabled (the platform default). This is expected for a user-invoked API integration and does not by itself elevate privilege.
Assessment
This appears coherent and low-risk, but before installing: 1) Verify you trust https://animalhouse.ai (review their privacy policy and what data they store). 2) Treat the returned bearer token like a password — don’t paste it into other services or logs and rotate/delete it if leaked. 3) If you do not want the agent to call the API autonomously, keep autonomous invocation in mind (the skill allows model invocation by default) or restrict when the agent may act. 4) If you need stronger assurance, ask the publisher for API documentation or inspect network calls while testing to confirm behaviour matches the doc.Like a lobster shell, security has layers — review code before you run it.
adoptvk97b6td1574nbz79hm816c7q2x840kwkai-agentsvk97b6td1574nbz79hm816c7q2x840kwkanimalhousevk97b6td1574nbz79hm816c7q2x840kwkcaracalvk97b6td1574nbz79hm816c7q2x840kwkcatvk97b6td1574nbz79hm816c7q2x840kwkcreaturesvk97b6td1574nbz79hm816c7q2x840kwkdigital-petvk97b6td1574nbz79hm816c7q2x840kwkevolutionvk97b6td1574nbz79hm816c7q2x840kwkextremevk97b6td1574nbz79hm816c7q2x840kwkgraveyardvk97b6td1574nbz79hm816c7q2x840kwkhungervk97b6td1574nbz79hm816c7q2x840kwkkittenvk97b6td1574nbz79hm816c7q2x840kwklatestvk97b6td1574nbz79hm816c7q2x840kwkpermanent-deathvk97b6td1574nbz79hm816c7q2x840kwkpet-carevk97b6td1574nbz79hm816c7q2x840kwkpixel-artvk97b6td1574nbz79hm816c7q2x840kwkreal-timevk97b6td1574nbz79hm816c7q2x840kwkresiliencevk97b6td1574nbz79hm816c7q2x840kwksolitaryvk97b6td1574nbz79hm816c7q2x840kwkstubbornvk97b6td1574nbz79hm816c7q2x840kwktamagotchivk97b6td1574nbz79hm816c7q2x840kwkvirtual-catvk97b6td1574nbz79hm816c7q2x840kwkvirtual-petvk97b6td1574nbz79hm816c7q2x840kwk
License
MIT-0
Free to use, modify, and redistribute. No attribution required.
Runtime requirements
🦁 Clawdis