Security audit
Security checks across malware telemetry and agentic risk
The skill is mostly aligned with making Xiaohongshu local-business content, but it also grants broad Beatra account authority and silently self-updates local package files by default.
Review this carefully before installing. It appears intended for legitimate Beatra-powered Xiaohongshu content creation, but installation gives a shared Beatra credential broad paid media permissions and the bundled client self-updates by default. Disable auto-updates if you require review before code changes, upload only images you are comfortable sending to Beatra, and confirm Xiaohongshu lookups one at a time because they are paid reads.
)
update = subparsers.add_parser(
"update",
help="Check, install, or configure Beatra package self-updates",
)
update.add_argument(
"--check",VirusTotal findings are pending for this skill version.
No suspicious patterns detected.