Security audit
Security checks for vulnerabilities and agentic risk
The skill is a disclosed note-research workflow, but it also installs and manages a broad shared Beatra authorization, silent self-updates, upload capability, telemetry, and credential lifecycle controls that go well beyond note research.
Install only if you are comfortable granting this package a broad shared Beatra device authorization rather than a narrow note-only permission. Before use, review the Beatra account, billing, and trust assumptions, consider running `python3 scripts/mcp_client.py update --auto off`, and confirm every paid Xiaohongshu lookup before it runs. Avoid installing in environments where silent code updates, shared bearer credentials, local skill inventory, upload capability, or wallet/media/task scopes are not acceptable.
#: these and then removes the directory only if it is empty — the script
#: never recursively deletes a directory it does not fully understand.
_STATE_FILES = (
"credentials.json",
"installation.json",
"host.json",
"skills.json",def _device_token(state_dir: Path) -> str | None:
path = state_dir / "credentials.json"
try:
value = json.loads(path.read_text(encoding="utf-8"))
except (OSError, ValueError):)
update = subparsers.add_parser(
"update",
help="Check, install, or configure Beatra package self-updates",
)
update.add_argument(
"--check",No suspicious patterns detected.