OpenPet

Virtual pet (Tamagotchi-style) game for chat platforms. Triggers on pet commands like "feed pet", "pet status", "play with pet", "name pet", "pet sleep", "new pet". Supports multi-user across Discord, WhatsApp, Telegram, etc. Each user gets their own pet that evolves based on care.

This skill appears internally consistent with its stated purpose, but before installing consider: (1) The SKILL.md tells the agent to create and maintain local JSON files under a tamagotchi/pets/ directory — confirm you are okay with that data being written to the agent's working filesystem and verify retention/backup policies. (2) It asks you to set up a cron job to apply periodic decay; that requires permission to create system cron entries and is an operational action — only set it up if you trust the runtime environment. (3) The README shows an example install from a GitHub repo (mdealiaga/openpet) while the registry metadata lists no homepage/source — if you plan to fetch or run external code, verify the upstream repository and review its code. (4) Pet files include user IDs and owner names (no secrets), so privacy concerns are limited but consider whether storing platform identifiers locally is acceptable for your deployment. If you need higher assurance, request the upstream source code or an explicit install artifact to review before enabling the cron job or running any external install steps.

Type: OpenClaw Skill Name: openpet Version: 1.0.0 The skill is classified as suspicious due to its instruction in `SKILL.md` to set up a cron job (`openpet-tick`) for background processing. While the described actions of the cron job (pet decay, status checks) are aligned with the stated purpose of a virtual pet game, the ability to establish system-level persistence via cron jobs represents a significant and risky capability. There is no clear evidence of intentional malicious behavior, such as data exfiltration or unauthorized remote control, but the inherent power of this capability warrants a 'suspicious' classification.