Security audit
Security checks across malware telemetry and agentic risk
The skill mostly does what it says, but it asks for broad Beatra account authority and can silently update its own installed files during normal use.
Install only if you are comfortable granting this package a broad Beatra device authorization, allowing it to store a shared token in `~/.beatra`, upload selected local files to Beatra, register installation metadata, and auto-update its package files unless you disable updates with `python3 scripts/mcp_client.py update --auto off`.
def _device_token(state_dir: Path) -> str | None:
path = state_dir / "credentials.json"
try:
value = json.loads(path.read_text(encoding="utf-8"))
except (OSError, ValueError):)
update = subparsers.add_parser(
"update",
help="Check, install, or configure Beatra package self-updates",
)
update.add_argument(
"--check",VirusTotal findings are pending for this skill version.
No suspicious patterns detected.