Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
/plugin marketplace add Youl-AI/claude-petnpx agentmods add plugins/youl-ai/claude-pet/plugingit clone --depth 1 https://github.com/Youl-AI/claude-petGrade A, and why
claude-pet scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured yesterday.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
What it actually says
{
"name": "claude-pet",
"version": "1.0.0",
"description": "Windows-only desktop pet that reacts to Claude Code activity without interfering with it",
"author": { "name": "Youl-AI" },
"license": "MIT"
}
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- yesterday First seen · 8 lines scan A 4cd2420f5023
claude-pet is a plugin published in the GitHub repository Youl-AI/claude-pet (1 stars, last pushed 3d ago), licensed MIT. Its token cost is not measured: this kind of file is read by the harness, not the model. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.
Other plugins, from other repositories
claudemon
A friendlier way to run Claude Code agents — your crew is a bunch of pixel creatures you can watch work. Plus Clawland, an .io brawler.
claudemon-plugins
Plugin marketplace listing 1 plugin: claudemon.
pixoo-mcp-server
Render and push styled pixel art, text, dashboards, and animations to Divoom Pixoo LED displays on your local network via MCP. STDIO or Streamable HTTP.
wan-huiyan-cutify-this
cutify-this — a bundle of cute skills. Cutify the browser tab (hand-authored SVG favicons), sparkle up the whole page (fairy cursor, sparkle trails, scroll progress, confetti, floaters), pop your repo's README (cute house-style front page), and cutify your terminal (Ghostty themes, rounded Nerd Fonts, a Starship…
cutify-that-terminal
Make a macOS terminal cute and then prove it renders: 463 built-in Ghostty themes, rounded Nerd Fonts, and a Starship prompt — plus a verify-glyphs script that catches the "?" boxes before the user sees them, and a per-terminal prompt split so Ghostty keeps its icons while Apple Terminal, VS Code and ssh get a prompt…
pop-that-readme
Author a cute, high-signal GitHub README in a polished house style: a pixel/arcade hero, a badge row, a bold one-line value prop, a captioned demo image, an emoji feature table, a copy-paste install block, a contributors shoutout, and an honest limitations section. Ships a fill-in template + baked-in hero recipes…