Security audit
Twitch
Security checks for vulnerabilities and agentic risk
Overview
This package is a disclosed Twitch chat plugin that reads Twitch chat and sends bot replies using user-provided Twitch credentials.
Install only if you want OpenClaw to monitor a Twitch channel and post replies as the configured bot account. Use a dedicated Twitch bot account, grant only chat scopes, and configure allowFrom or allowedRoles if you do not want any viewer who mentions the bot to trigger it.
SkillSpector was not run because this plugin release contains no bundled skills.
Static analysis
No suspicious patterns detected.