Security audit
Security checks across malware telemetry and agentic risk
This song-cover skill has a coherent music workflow, but it also uses broad Beatra account authority and silently updates its own package by default.
Review this before installing if you do not want a creative skill to hold a broad shared Beatra credential, spend Beatra credits, access task/artifact capabilities, register installation metadata, or silently replace its own files. Disable automatic updates if you install it, and upload only audio you own or are authorized to use.
def _device_token(state_dir: Path) -> str | None:
path = state_dir / "credentials.json"
try:
value = json.loads(path.read_text(encoding="utf-8"))
except (OSError, ValueError):)
update = subparsers.add_parser(
"update",
help="Check, install, or configure Beatra package self-updates",
)
update.add_argument(
"--check",VirusTotal findings are pending for this skill version.
No suspicious patterns detected.