Security audit
Security checks across malware telemetry and agentic risk
The skill does the advertised copy and cover workflow, but it also requests broad Beatra powers and silently updates its own package by default.
Install only if you are comfortable giving Beatra a persistent shared device credential with broad media, wallet, artifact, and task access. Before using it, consider disabling automatic updates with the documented update command, avoid uploading sensitive local files, and revoke the Beatra device authorization when you no longer need the skill.
#: these and then removes the directory only if it is empty — the script
#: never recursively deletes a directory it does not fully understand.
_STATE_FILES = (
"credentials.json",
"installation.json",
"host.json",
"skills.json",def _device_token(state_dir: Path) -> str | None:
path = state_dir / "credentials.json"
try:
value = json.loads(path.read_text(encoding="utf-8"))
except (OSError, ValueError):)
update = subparsers.add_parser(
"update",
help="Check, install, or configure Beatra package self-updates",
)
update.add_argument(
"--check",VirusTotal findings are pending for this skill version.
No suspicious patterns detected.