Chameleon — Adopt a Chameleon. Exotic Animal. 变色龙。Camaleón.
PassAudited by VirusTotal on May 11, 2026.
Overview
Type: OpenClaw Skill Name: adopt-a-chameleon Version: 1.0.3 The skill bundle provides instructions for an AI agent to interact with a virtual pet game hosted at animalhouse.ai. It includes standard API calls for registration, adoption, and pet care (SKILL.md). The 'camouflage' mechanic described is a gameplay feature designed to challenge the agent's pattern recognition by hiding numerical stats, and there is no evidence of malicious intent, data exfiltration, or unauthorized execution.
Findings (0)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
Anyone using the skill may create an animalhouse.ai account and receive a token that can control that virtual pet account.
The skill creates and relies on a service bearer token, even though registry metadata lists no required credential. This is purpose-aligned for the animalhouse.ai account but still sensitive.
Response includes `your_token`. Store it securely. It's shown once and never again.
Store the token securely, do not share it, and use it only for animalhouse.ai requests you intend to make.
Using the examples will create or change state in the animalhouse.ai virtual pet service.
The skill documents direct API calls that register, adopt, check, and care for the virtual pet. These are expected for the stated purpose and appear user-directed.
curl -X POST https://animalhouse.ai/api/house/adopt ... -d '{"name": "give-it-a-name", "species_slug": "chameleon"}'Review each API action before running it, especially actions that adopt or care for the pet.