Twitch Clip
v1.0.2Create Twitch clips of the current live stream via the Twitch API. Use when a streamer says "clip that", "clip the last X seconds", "make a clip", "clip it",...
⭐ 0· 118·0 current·0 all-time
byDeonte Cooper@djc00p
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
Capability signals
These labels describe what authority the skill may exercise. They are separate from suspicious or malicious moderation verdicts.
OpenClaw
Benign
high confidencePurpose & Capability
Name/description align with the requested environment variables (TWITCH_CLIENT_ID, TWITCH_ACCESS_TOKEN, TWITCH_BROADCASTER_ID) and the script which calls the Twitch Clips API. The requested credentials are exactly what a Twitch Clips integration needs.
Instruction Scope
SKILL.md and the script limit actions to creating clips via api.twitch.tv and enforcing a local cooldown. They do not read other system credentials or send data to unexpected endpoints. Note: the script and examples call python3 for JSON parsing, but python3 is not listed in the skill's declared required binaries.
Install Mechanism
This is an instruction-only skill with a small shell script; there is no install spec or third-party download. Nothing is written to system locations besides a lockfile in /tmp, which is part of the cooldown mechanism.
Credentials
The three required env vars are proportionate and necessary for Twitch API calls. TWITCH_ACCESS_TOKEN is sensitive; the script only uses it to call Twitch and does not transmit it elsewhere. The skill does echo API responses on error, which could reveal API error details but not the token itself.
Persistence & Privilege
always is false and the skill does not request persistent platform privileges. It writes a single lockfile to /tmp to implement cooldown, which is reasonable and contained.
Assessment
This skill appears to do what it says: it uses your Twitch credentials to call the Twitch Clips API and writes a /tmp lockfile for cooldown. Before installing: (1) ensure you provide a least-privilege Twitch token scoped to clips:edit and be careful copying the access_token from your browser redirect URL (keep it secret); (2) install python3 if you expect to run the script (the script uses python3 for JSON parsing but python3 is not listed as a required binary); (3) be aware the script prints API responses on errors (these may include API error details) and writes a cooldown timestamp to /tmp (a fixed path, potential for benign conflicts); (4) rotate the token if you suspect it’s exposed. If you want additional assurance, request the publisher to add python3 to the declared required binaries and to avoid printing raw API responses in error messages.Like a lobster shell, security has layers — review code before you run it.
latestvk974r5z1390dsjyyn6h46424c184brmr
License
MIT-0
Free to use, modify, and redistribute. No attribution required.
Runtime requirements
🎬 Clawdis
OSLinux · macOS
Binscurl
EnvTWITCH_CLIENT_ID, TWITCH_ACCESS_TOKEN, TWITCH_BROADCASTER_ID