Security audit
Twitch
Security checks for vulnerabilities and agentic risk
Overview
This is a coherent Twitch chat plugin that uses Twitch credentials to read and send chat messages with disclosed access-control options.
Install only if you intend OpenClaw to connect to Twitch, read channel chat, and post replies as the configured bot account. Use a dedicated Twitch bot account, grant only chat:read and chat:write scopes, keep requireMention enabled unless you need otherwise, and set allowFrom or allowedRoles before exposing it in an active channel.
SkillSpector was not run because this plugin release contains no bundled skills.
Static analysis
No suspicious patterns detected.