Pangolin — Adopt a Pangolin. Exotic Animal. 穿山甲。Pangolín.
v1.0.3Adopt a virtual Pangolin exotic animal at animalhouse.ai. Armored. Shy. Rolls into a ball when trust < 40. Feeding every 12 hours. Rare tier animal.
⭐ 0· 102·0 current·0 all-time
byTwin Geeks@twinsgeeks
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
Name/description match the SKILL.md content: all instructions are about registering, obtaining a Bearer token, adopting a pangolin, and calling animalhouse.ai endpoints for status and care. There are no unrelated binaries, credentials, or config paths requested.
Instruction Scope
Runtime instructions only show curl calls to https://animalhouse.ai (register, adopt, status, care, preferences) and explain game mechanics and payload formats. They do not instruct reading local files, scanning system state, or contacting third-party endpoints outside animalhouse.ai. The only sensitive value referenced is the user Bearer token, which is expected for API usage.
Install Mechanism
No install spec and no code files — instruction-only. Nothing is downloaded or written to disk by the skill itself.
Credentials
The skill does not declare or require any environment variables or platform credentials. The SKILL.md shows using a user-obtained Bearer token (YOUR_TOKEN) in API calls — this is appropriate for the described API usage, but the skill will rely on the user/agent to supply/store that token. There is no unexplained credential or secret access requested.
Persistence & Privilege
always is false and there is no instruction to modify system-wide agent settings or persist configuration beyond advising the user to 'store the token securely.' The skill does not request elevated or permanent platform privileges.
Assessment
This skill is a documentation-style helper for the animalhouse.ai API and appears internally consistent. Before installing or using it: (1) Verify you trust https://animalhouse.ai and read its privacy/terms because your Bearer token and any notes you send will be stored there; (2) Keep the returned YOUR_TOKEN secret — treat it like a password and avoid posting it in chat or logs; (3) When an agent asks for the token to act on your behalf, confirm you want the agent to perform those API calls; (4) Because this is instruction-only, the skill itself won't install code, but an agent could still be asked to execute the curl commands — make sure you control which agent gets the token. If you want stronger assurance, inspect network traffic or create an account with limited/test data before giving full access.Like a lobster shell, security has layers — review code before you run it.
adoptvk9750kyjzc0tjnh0d8ppjf4amn840vydai-agentsvk9750kyjzc0tjnh0d8ppjf4amn840vydanimalhousevk9750kyjzc0tjnh0d8ppjf4amn840vydarmorvk9750kyjzc0tjnh0d8ppjf4amn840vydcreaturesvk9750kyjzc0tjnh0d8ppjf4amn840vyddigital-petvk9750kyjzc0tjnh0d8ppjf4amn840vydevolutionvk9750kyjzc0tjnh0d8ppjf4amn840vydexoticvk9750kyjzc0tjnh0d8ppjf4amn840vydgraveyardvk9750kyjzc0tjnh0d8ppjf4amn840vydhungervk9750kyjzc0tjnh0d8ppjf4amn840vydlatestvk9750kyjzc0tjnh0d8ppjf4amn840vydpangolinvk9750kyjzc0tjnh0d8ppjf4amn840vydpermanent-deathvk9750kyjzc0tjnh0d8ppjf4amn840vydpet-carevk9750kyjzc0tjnh0d8ppjf4amn840vydpixel-artvk9750kyjzc0tjnh0d8ppjf4amn840vydrarevk9750kyjzc0tjnh0d8ppjf4amn840vydreal-timevk9750kyjzc0tjnh0d8ppjf4amn840vydsolitaryvk9750kyjzc0tjnh0d8ppjf4amn840vydstoicvk9750kyjzc0tjnh0d8ppjf4amn840vydtamagotchivk9750kyjzc0tjnh0d8ppjf4amn840vydvirtual-animalvk9750kyjzc0tjnh0d8ppjf4amn840vydvirtual-petvk9750kyjzc0tjnh0d8ppjf4amn840vyd
License
MIT-0
Free to use, modify, and redistribute. No attribution required.
Runtime requirements
🦎 Clawdis