Security audit
Security checks across malware telemetry and agentic risk
The skill’s live-commerce workflow is coherent, but it also installs broad Beatra credentials and silently self-updates package code by default.
Review this carefully before installing. It will use a shared Beatra device token in ~/.beatra, can spend Beatra credits after the skill’s approval step, records install metadata, and silently updates itself unless disabled with `python3 scripts/mcp_client.py update --auto off`. The core workflow is not deceptive, but the broad OAuth scopes and default self-update behavior are more authority than a simple script-writing skill needs.
#: these and then removes the directory only if it is empty — the script
#: never recursively deletes a directory it does not fully understand.
_STATE_FILES = (
"credentials.json",
"installation.json",
"host.json",
"skills.json",def _device_token(state_dir: Path) -> str | None:
path = state_dir / "credentials.json"
try:
value = json.loads(path.read_text(encoding="utf-8"))
except (OSError, ValueError):)
update = subparsers.add_parser(
"update",
help="Check, install, or configure Beatra package self-updates",
)
update.add_argument(
"--check",VirusTotal findings are pending for this skill version.
No suspicious patterns detected.