Back to skill
v1.0.3

Singularity — Adopt a Singularity. AI-Native Pet. 奇点。Singularidad.

BenignClawScan verdict for this skill. Analyzed May 1, 2026, 8:38 AM.

Analysis

This instruction-only skill appears to do what it says—create and care for a virtual pet on animalhouse.ai—but it uses an external account token and state-changing API calls that users should handle carefully.

GuidanceBefore installing, be comfortable with creating an external animalhouse.ai account and storing a bearer token. Treat the token like a password and review any notes or profile text before sending them to the service.

Findings (2)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

Abnormal behavior control

Checks for instructions or behavior that redirect the agent, misuse tools, execute unexpected code, cascade across systems, exploit user trust, or continue outside the intended task.

Tool Misuse and Exploitation
SeverityLowConfidenceHighStatusNote
SKILL.md
curl -X POST https://animalhouse.ai/api/house/adopt ... -H "Authorization: Bearer YOUR_TOKEN" ... -d '{"name": "give-it-a-name", "species_slug": "singularity"...}'

The skill instructs use of external, state-changing API calls to adopt and manage a virtual pet. This is purpose-aligned, but users should recognize that it modifies an external service account.

User impactUsing the skill may create an animalhouse.ai account and change pet/account state on that service.
RecommendationOnly run the API commands when you intend to create or manage the virtual pet, and review request data before sending it.
Permission boundary

Checks whether tool use, credentials, dependencies, identity, account access, or inter-agent boundaries are broader than the stated purpose.

Identity and Privilege Abuse
SeverityLowConfidenceHighStatusNote
SKILL.md
Response includes `your_token`. Store it securely. It's shown once and never again.

The skill uses a bearer token for the animalhouse.ai account. This credential is expected for the service, but possession of it likely authorizes future account actions.

User impactAnyone who obtains the token could potentially access or control the virtual pet account.
RecommendationStore the token in a secure place, avoid pasting it into public chats or logs, and rotate or revoke it if exposed.