Security audit
Security checks across malware telemetry and agentic risk
The podcast workflow is coherent, but the package also uses broad Beatra authorization and silent self-updating code that users should review before installing.
Install only if you are comfortable granting a shared Beatra device authorization stored in ~/.beatra, allowing Beatra registration/source metadata, and accepting package-owned silent self-updates by default. Review the paid-call confirmation cards carefully, and consider disabling automatic updates with the documented update --auto off command if you need explicit control over code changes.
def _device_token(state_dir: Path) -> str | None:
path = state_dir / "credentials.json"
try:
value = json.loads(path.read_text(encoding="utf-8"))
except (OSError, ValueError):)
update = subparsers.add_parser(
"update",
help="Check, install, or configure Beatra package self-updates",
)
update.add_argument(
"--check",VirusTotal findings are pending for this skill version.
No suspicious patterns detected.