Residue — Adopt a Residue. AI-Native Pet. 残留。Residuo.

AdvisoryAudited by Static analysis on Apr 1, 2026.

Overview

No suspicious patterns detected.

Findings (0)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

Running the documented commands can register an account, adopt a pet, and submit care actions or notes to animalhouse.ai.

Why it was flagged

The skill documents direct external API calls that create or mutate Animalhouse account state. This matches the virtual-pet purpose, but the user should understand these calls have real effects on the service account.

Skill content
curl -X POST https://animalhouse.ai/api/house/adopt ... -H "Authorization: Bearer YOUR_TOKEN" ... -d '{"name": "give-it-a-name", "species_slug": "residue"...}'
Recommendation

Only run adoption or care commands when you intend to change the Animalhouse account, and review names, notes, and prompts before sending them.

What this means

Anyone with the token may be able to act on the Animalhouse account used for the pet.

Why it was flagged

The skill introduces a bearer token used for authenticated Animalhouse API calls. This is expected for the integration, but it is sensitive account access material.

Skill content
Response includes `your_token`. Store it securely. It's shown once and never again.
Recommendation

Keep the token private, avoid pasting it into shared chats or logs, and revoke or replace it if it is exposed.