Security audit
Security checks across malware telemetry and agentic risk
The skill matches its singing-photo purpose, but it should be reviewed because it grants a broad shared paid Beatra token and silently self-updates local package code by default.
Install only if you are comfortable giving this Beatra package a shared local bearer token that can run paid Beatra operations and accepting default silent package updates. Consider disabling automatic updates with the documented update --auto off command, watch for the admission card before any paid generation, and revoke the device from the Beatra Console if you no longer use it.
},
"mcp": {
"authentication": "device-bearer",
"credential_file": "~/.beatra/credentials.json",
"name": "beatra",
"transport": "streamable-http",
"url": "https://mcp.beatra.ai/mcp")
update = subparsers.add_parser(
"update",
help="Check, install, or configure Beatra package self-updates",
)
update.add_argument(
"--check",VirusTotal findings are pending for this skill version.
No suspicious patterns detected.