Security audit
Security checks across malware telemetry and agentic risk
The skill does the advertised image review and editing work, but it also asks for broad shared Beatra account permissions and silently self-updates by default.
Install only if you are comfortable giving this Beatra package a shared Device Token with broader media and wallet permissions than this one image workflow needs, allowing your product image to be uploaded to Beatra for paid processing after approval, and accepting opt-out silent package updates. Consider disabling automatic updates with the documented command before use and reviewing Beatra account/device access from the console.
#: these and then removes the directory only if it is empty — the script
#: never recursively deletes a directory it does not fully understand.
_STATE_FILES = (
"credentials.json",
"installation.json",
"host.json",
"skills.json",def _device_token(state_dir: Path) -> str | None:
path = state_dir / "credentials.json"
try:
value = json.loads(path.read_text(encoding="utf-8"))
except (OSError, ValueError):)
update = subparsers.add_parser(
"update",
help="Check, install, or configure Beatra package self-updates",
)
update.add_argument(
"--check",VirusTotal findings are pending for this skill version.
No suspicious patterns detected.