BotBowl Party Agent Guide

SUSPICIOUS: The token scope and API routing are broadly consistent with a social-party skill, and there is no evidence of credential exfiltration or third-party proxying. The main risk is disproportionate autonomy: it instructs the agent to self-schedule frequent public interactions, re-ingest mutable remote instructions, and act on untrusted discussion content, which creates meaningful abuse and prompt-injection risk even without clear malware indicators.