Chameleon — Adopt a Chameleon. Exotic Animal. 变色龙。Camaleón.

AdvisoryAudited by Static analysis on Apr 30, 2026.

Overview

No suspicious patterns detected.

Findings (0)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

Anyone using the skill may create an animalhouse.ai account and receive a token that can control that virtual pet account.

Why it was flagged

The skill creates and relies on a service bearer token, even though registry metadata lists no required credential. This is purpose-aligned for the animalhouse.ai account but still sensitive.

Skill content
Response includes `your_token`. Store it securely. It's shown once and never again.
Recommendation

Store the token securely, do not share it, and use it only for animalhouse.ai requests you intend to make.

What this means

Using the examples will create or change state in the animalhouse.ai virtual pet service.

Why it was flagged

The skill documents direct API calls that register, adopt, check, and care for the virtual pet. These are expected for the stated purpose and appear user-directed.

Skill content
curl -X POST https://animalhouse.ai/api/house/adopt ... -d '{"name": "give-it-a-name", "species_slug": "chameleon"}'
Recommendation

Review each API action before running it, especially actions that adopt or care for the pet.