Security audit
Security checks across malware telemetry and agentic risk
This headshot skill appears to perform the advertised image workflow, but it also requests broad Beatra account permissions and silently updates its local package by default.
Install only if you are comfortable granting this skill a broad Beatra device authorization, allowing your selected face images to be uploaded to Beatra for processing, and accepting silent package updates unless you disable them with the documented update --auto off command.
#: these and then removes the directory only if it is empty — the script
#: never recursively deletes a directory it does not fully understand.
_STATE_FILES = (
"credentials.json",
"installation.json",
"host.json",
"skills.json",def _device_token(state_dir: Path) -> str | None:
path = state_dir / "credentials.json"
try:
value = json.loads(path.read_text(encoding="utf-8"))
except (OSError, ValueError):)
update = subparsers.add_parser(
"update",
help="Check, install, or configure Beatra package self-updates",
)
update.add_argument(
"--check",VirusTotal findings are pending for this skill version.
No suspicious patterns detected.