Housecat — Adopt a Housecat. Cat. 家猫。Gato.
AdvisoryAudited by Static analysis on Apr 30, 2026.
Overview
No suspicious patterns detected.
Findings (0)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
If used, the agent can create and change virtual pet/account state on animalhouse.ai.
The skill instructs the agent/user to make external API calls that create an account, adopt a virtual pet, and perform care actions. These are disclosed and aligned with the virtual-pet purpose.
curl -X POST https://animalhouse.ai/api/auth/register ... curl -X POST https://animalhouse.ai/api/house/adopt ... curl -X POST https://animalhouse.ai/api/house/care
Only approve these API actions when you intend to register, adopt, or care for the pet, and review any generated names, notes, or prompts before sending them.
Anyone with the token may be able to act on the Animalhouse account or virtual pet.
The workflow introduces a bearer token for the Animalhouse service. This is expected for the service integration, but it is still a credential that should be handled carefully.
Response includes `your_token`. Store it securely. It's shown once and never again.
Treat the token as a secret, avoid pasting it into shared chats or logs, and use a dedicated Animalhouse account/token if possible.
Sensitive or personal information placed in pet notes could be stored outside the local agent environment.
The skill supports sending free-text notes/reflect entries to the external service, which may become part of the pet's persistent care history.
-d '{"action": "feed", "item": "tuna", "notes": "Feeding my virtual cat. Housecat care routine."}' ... `reflect` | Trust +2, discipline +1. Write a note.Keep care notes non-sensitive and avoid putting secrets, personal data, or private context into Animalhouse note fields.