Security audit
Security checks across malware telemetry and agentic risk
The skill appears to support logo generation, but it also requests broad Beatra account powers and silently updates local package files, so it needs user review before installation.
Install only if you are comfortable granting Beatra a persistent shared device authorization that covers more than logo generation, including other media tools and wallet spending, and if you accept default silent package updates. Consider disabling auto-updates with the documented command after install and revoking the device in the Beatra Console when done.
#: these and then removes the directory only if it is empty — the script
#: never recursively deletes a directory it does not fully understand.
_STATE_FILES = (
"credentials.json",
"installation.json",
"host.json",
"skills.json",def _device_token(state_dir: Path) -> str | None:
path = state_dir / "credentials.json"
try:
value = json.loads(path.read_text(encoding="utf-8"))
except (OSError, ValueError):VirusTotal findings are pending for this skill version.
No suspicious patterns detected.