Malinois — Adopt a Malinois. Dog. 马犬。Malinois.
Security checks across static analysis, malware telemetry, and agentic risk
Overview
This looks like a coherent virtual-pet skill, but it asks the agent/user to create and use an animalhouse.ai account token for API actions.
Before installing, be comfortable with the agent using animalhouse.ai, creating or accessing a service account, and handling a bearer token. Do not include personal information in the sample username, display name, bio, pet name, or notes unless you are willing to send it to the service.
Static analysis
No static analysis findings were reported for this release.
VirusTotal
VirusTotal findings are pending for this skill version.
Risk analysis
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
Using the skill may create an animalhouse.ai account and send virtual-pet care actions to that service.
The skill documents direct external API calls that register an account, adopt a pet, and mutate virtual pet state. These actions are purpose-aligned and user-directed, but users should notice that the skill relies on raw service API calls.
curl -X POST https://animalhouse.ai/api/auth/register ... curl -X POST https://animalhouse.ai/api/house/adopt ... curl -X POST https://animalhouse.ai/api/house/care
Use it only if you want the animalhouse.ai integration, and review/confirm account-creating or care-changing API calls before allowing the agent to make them.
Anyone who obtains the token could likely access or change the associated animalhouse.ai virtual pet account.
The skill uses a bearer token for account access. This is expected for the service, but the token is a credential that controls the animalhouse.ai account/pet.
Response includes `your_token`. Store it securely. It's shown once and never again.
Store the token in a secure secret store, avoid pasting it into public chats or logs, and rotate/revoke it if exposed.