Pizzaparty Automation

Twitch engagement via PizzaParty.gg - 4 daily sessions for LevelUpLove

This skill is inconsistent: the README asks for Discord OAuth credentials, Twitch client secrets, and Playwright scraping, but the code only sends chat messages via Twitch IRC using an OAuth token. Before installing or running: (1) Do not provide your Discord password or any client secrets to this skill unless you can verify and trust the source. (2) Prefer a version that declares required env vars in the registry metadata and that implements OAuth via proper token flows rather than asking for raw passwords. (3) If you intend to use the included code, verify it yourself: it only needs a Twitch IRC token/username passed on the command line and does not perform the scraping claimed in SKILL.md. (4) Consider policy/TOS risk: automated chat activity can violate Twitch and third-party platform terms and could get accounts banned. (5) If you need the advertised scraping behavior, request the author to provide a clear, auditable implementation (explicit Playwright dependency, safe OAuth flow, no storage of passwords) and to justify every sensitive env var. If you cannot verify the author or code, avoid installing or running the skill with live credentials.

Type: OpenClaw Skill Name: pizzaparty-automation Version: 2.0.0 The skill is designed for automated point farming on PizzaParty.gg by engaging with Twitch streamers, which carries a high risk of account suspension for botting. It requires sensitive credentials (Discord OAuth and Twitch IRC tokens) and instructs the AI agent to perform browser-based logins, increasing the attack surface for credential exposure. Additionally, index.py lacks input sanitization when constructing IRC commands (e.g., in the message and join methods), which could allow for IRC injection if scraped streamer names or messages contain CRLF characters.