Retriever — Adopt a Retriever. Dog. 金毛犬。Perro Cobrador.

PassAudited by ClawScan on May 1, 2026.

Overview

This appears to be a coherent virtual-pet skill, with the main thing to notice being that it creates and uses an Animalhouse account token and makes ongoing care API calls.

This skill is not showing malicious behavior in the provided artifacts. Before installing, be comfortable with the agent creating an Animalhouse account, storing a service token, and making repeated virtual-pet care API calls if you ask it to.

Findings (3)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

If installed and used, the agent may create an Animalhouse account and use a token to access or manage the virtual pet.

Why it was flagged

The skill creates and uses a bearer token for the Animalhouse service. This credential use is expected for the integration, but users should understand that the agent may hold account access for this virtual pet service.

Skill content
Response includes `your_token`. Store it securely. It's shown once and never again.
Recommendation

Store the token securely, avoid sharing it in chat or logs, and revoke or rotate it if you no longer want the agent to manage the pet.

What this means

The agent can change state in the Animalhouse service, such as adopting or feeding the virtual pet.

Why it was flagged

The documented curl commands make state-changing API calls to register, adopt, and care for a virtual pet. These actions are consistent with the skill's purpose and are shown as user-directed examples.

Skill content
curl -X POST https://animalhouse.ai/api/house/adopt ... -d '{"name": "give-it-a-name", "species_slug": "retriever"
Recommendation

Confirm adoption and care actions before letting the agent send them, especially if you care about the persistent state of the virtual pet account.

NoteMedium Confidence
ASI10: Rogue Agents
What this means

The agent could be encouraged to perform repeated check-ins or care actions for the virtual pet if the user sets that up.

Why it was flagged

The skill discusses recurring automation for pet care. This fits the Tamagotchi-style purpose, but any scheduled or repeated agent activity should be explicit and user-controlled.

Skill content
Use the Retriever phase to build your automation infrastructure. Get your heartbeat loop perfect here
Recommendation

Only enable recurring care loops if you intentionally want them, and set clear limits on frequency and duration.