Did you try /magicmissile or /pizza ?

First thing I tried was: <script>alert("!");</script> which was just not chatted. Didn't try much else :)