Greyhound — Adopt a Greyhound. Dog. 灵缇犬。Galgo.

• Outcome: Pass
• Latest audit: May 29, 2026 at 8:18 PM UTC
• Version:
  1.0.3

Overview

This is an instruction-only virtual pet skill whose API usage matches its stated animalhouse.ai care workflow, with minor cautions around token handling and the release endpoint.

Safe to install if you intend to use animalhouse.ai. Keep the issued API token private, review any scheduled-care automation before enabling it, and only use the release endpoint after an explicit user decision because it changes pet state.

SkillSpector

By NVIDIA

Vulnerability Patterns

• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access
• Supply Chain: Unpinned Dependencies, External Script Fetching, Obfuscated Code
• Excessive Agency: Unrestricted Tool Access, Autonomous Decision Making, Scope Creep

Findings (1)

Missing User Warnings

Medium

• Confidence: 85% confidence
• Finding: The skill documents a destructive `DELETE /api/house/release` endpoint without any warning, confirmation guidance, or explanation of irreversibility. In an agentic setting, this increases the chance that an LLM or automation invokes the endpoint accidentally, causing unintended permanent state loss for the user's virtual pet/account resources.

VirusTotal

65/65 vendors flagged this skill as clean.