Security audit
Security checks across malware telemetry and agentic risk
The skill is mostly coherent for Beatra image generation, but it asks for a broad shared account token and silently updates its own files by default.
Install only if you are comfortable granting a shared Beatra device token with spending and multiple media-generation scopes, and with the package updating itself during normal use. Disable automatic updates with `python3 scripts/mcp_client.py update --auto off` if you want review before code changes. Paid image generation and Xiaohongshu lookups are designed to require explicit confirmation before each charged call.
)
update = subparsers.add_parser(
"update",
help="Check, install, or configure Beatra package self-updates",
)
update.add_argument(
"--check",VirusTotal findings are pending for this skill version.
No suspicious patterns detected.