Security audit
Twitch
Security checks across malware telemetry and agentic risk
Overview
This official OpenClaw Twitch plugin does what it says: connects a configured bot account to Twitch chat so OpenClaw can read and send chat messages.
Before installing, use a dedicated Twitch bot account and grant only the needed chat scopes. Treat accessToken, clientSecret, and refreshToken as sensitive, and configure allowFrom or allowedRoles so public chat users cannot freely trigger the bot.
VirusTotal
61/61 vendors flagged this plugin as clean.
Static analysis
No suspicious patterns detected.