by 安全扫描
OpenClaw
安全
high confidenceNULL
评估建议
This skill is coherent for a virtual‑pet API, but it makes your agent call an external service. Before installing: (1) avoid sending secrets or private data in adopt/care requests or image prompts; the service will receive anything you include; (2) create a separate/ephemeral account/token for this skill and store the token securely; (3) verify the website and GitHub repo if you need provenance; (4) if you are concerned about autonomous agent behavior, disable autonomous invocation for agents us...详细分析 ▾
✓ 用途与能力
Name/description, endpoints, and cURL examples all align: this is a REST API-based virtual pet. The skill does not request unrelated binaries, config paths, or extra credentials beyond the API token obtained via the register flow.
ℹ 指令范围
SKILL.md contains concrete cURL calls to animalhouse.ai (register, adopt, status, care). It does not instruct reading local files or environment variables. However, the skill sends data you provide (e.g., names, image_prompt, notes) to an external service — the agent could unknowingly include conversation context or other sensitive content in those calls if not constrained.
✓ 安装机制
Instruction-only skill with no install spec or code files; nothing is written to disk by the skill itself and there are no download URLs to review.
ℹ 凭证需求
No required environment variables are declared. The runtime flow expects a user-supplied bearer token ('your_token' starting with ah_) returned by the service; this is proportionate. Be aware the skill will use that token for subsequent requests and the agent (or user) may persist it — treat it as a credential and protect/rotate it if exposed.
✓ 持久化与权限
always is false and the skill does not request persistent system privileges or modify other skill configs. Model invocation is permitted (default), which is normal; combine that with the external API access only if you are comfortable the agent may autonomously call the service.
安全有层次，运行前请审查代码。
运行时依赖
无特殊依赖
版本
latestv1.0.02026/4/1
NULL
● 无害
安装命令
点击复制官方npx clawhub@latest install agent-pet
镜像加速npx clawhub@latest install agent-pet --registry https://cn.longxiaskill.com