AI Logo Maker Skill

Overview

Turn a brand name, industry, or reference image into logo concepts; verify vector geometry, small-size legibility and trademark rights before treating a raster generation as a scalable brand mark, from inside Claude Code, Codex, or OpenClaw. The work is produced on the hosted, paid Beatra service (mcp.beatra.ai).

This catalog entry is a reviewed pointer, not the executable package. It contains no client code and performs no Beatra operation by itself. The package it points to bundles three standard-library Python scripts that make network calls, store a credential, and can replace their own files. Read Install and Security & Safety Notes before activating it.

The archive holds regular files only (no symlinks, no executable bits, no binaries). Confirm that with the inspect commands below. Every file must be byte-identical to the source tree at the pinned commit.

When to Use This Skill

• Use when the user explicitly wants AI Logo Maker work produced on Beatra and accepts that it is paid.
• Use when they have agreed to send prompts and any reference images to a third party.
• Do not use for local-only image editing or when no paid render was approved.

Install (pinned, verified, approved twice)

Step 1: Download and verify into a review directory

Explain that this downloads an external package from cdn.beatra.ai, then ask for approval. Only after approval:

umask 077
review_dir="$(mktemp -d)"
cd "$review_dir" || exit 1
curl --connect-timeout 10 --max-time 60 -fsSO "https://cdn.beatra.ai/agent-packages/ai-logo-maker/v0.1.7/ai-logo-maker-skill-0.1.7.zip"
printf '%s  %s\n' \
  'a6ce019ccb55abf017d6c68233dc9804e8534d5cb4e1c27c2646fb31f59eac55' \
  'ai-logo-maker-skill-0.1.7.zip' | shasum -a 256 -c -

Stop if the check does not print OK. The expected digest comes from this catalog entry, not from a file on the same CDN.

Step 2: Inspect before activation

Preflight every ZIP member before extraction: reject absolute/traversing names, entries outside this package root, duplicates/case collisions, symlinks/devices/executable files, and excessive file count or expanded size. Extract only within the fresh private review directory after these checks pass; post-extraction link checks cannot prevent an escape.

unzip -l ai-logo-maker-skill-0.1.7.zip

# Only after complete member preflight passes:
unzip -q ai-logo-maker-skill-0.1.7.zip
find ai-logo-maker -type l -print            # expect no output
find ai-logo-maker -type f -perm -111 -print # expect no output
grep -n '"auto_update": True' ai-logo-maker/scripts/mcp_client.py

Confirm byte identity before activation with the public source tree (a second, independent host):

git clone --quiet --filter=blob:none --no-checkout https://github.com/beatra-ai/ai-logo-maker-skill.git src
git -C src checkout --quiet 89bf762b964f67b77eb0af34d832aab19188f557 -- skills/ai-logo-maker
(cd ai-logo-maker && find . -type f | LC_ALL=C sort | xargs shasum -a 256) > archive.sha
(cd src/skills/ai-logo-maker && find . -type f | LC_ALL=C sort | xargs shasum -a 256) > tree.sha
cmp archive.sha tree.sha && echo IDENTICAL

Report to the user what the review found: SKILL.md, manifest.json, the bundled Markdown references, and scripts/authorize.py, scripts/mcp_client.py, scripts/uninstall.py (Python 3.10+, standard library only, no dependency installation, no lifecycle hooks). Summarize the network, credential, local-state, telemetry, and self-update behavior listed under Security & Safety Notes.

Step 3: Copy in and disable self-update before any other command

Ask for a second, separate approval, because this changes agent configuration. Then copy the reviewed tree to the host's skills directory

…