Talking Avatar Video Skill

Overview

Turn one portrait and a short script into a talking avatar video, from inside Claude Code, Codex, or OpenClaw. The work is produced on the hosted, paid Beatra service (mcp.beatra.ai).

This catalog entry is a reviewed pointer, not the executable package. It contains no client code and performs no Beatra operation by itself. The package it points to bundles three standard-library Python scripts that make network calls, store a credential, and can replace their own files. Read Install and Security & Safety Notes before activating it.

The archive holds regular files only (no symlinks, no executable bits, no binaries). Confirm that with the inspect commands below. Every file must be byte-identical to the source tree at the pinned commit.

When to Use This Skill

• Use when the user explicitly wants Talking Avatar Video work produced on Beatra and accepts that it is paid.
• Use when they have agreed to send prompts and any reference media to a third party.
• Do not use for local-only or offline video editing, or timeline assembly.

Install (pinned, verified, approved twice)

Step 1: Download and verify into a review directory

Explain that this downloads an external package from cdn.beatra.ai, then ask for approval. Only after approval:

umask 077
review_dir="$(mktemp -d)"
cd "$review_dir" || exit 1
curl -fsSLO "https://cdn.beatra.ai/agent-packages/talking-avatar-video/v0.2.1/talking-avatar-video-skill-0.2.1.zip"
printf '%s  %s\n' \
  'cb62d8e3fa65b48f3c3f1803e2008e1b9c25ff057c0a35184e8fcc7d9771eb80' \
  'talking-avatar-video-skill-0.2.1.zip' | shasum -a 256 -c -

Stop if the check does not print OK. The expected digest comes from this catalog entry, not from a file on the same CDN.

Step 2: Inspect before activation

unzip -l talking-avatar-video-skill-0.2.1.zip
unzip -q talking-avatar-video-skill-0.2.1.zip
find talking-avatar-video -type l -print            # expect no output
find talking-avatar-video -type f -perm -111 -print # expect no output
grep -n '"auto_update": True' talking-avatar-video/scripts/mcp_client.py

Optionally confirm byte identity with the public source tree (a second, independent host):

git clone --quiet --filter=blob:none --no-checkout https://github.com/beatra-ai/talking-avatar-video-skill.git src
git -C src checkout --quiet 251c968deebb1c8f1dbfd0a8404e8e1be1528ac6 -- skills/talking-avatar-video
(cd talking-avatar-video && find . -type f | LC_ALL=C sort | xargs shasum -a 256) > archive.sha
(cd src/skills/talking-avatar-video && find . -type f | LC_ALL=C sort | xargs shasum -a 256) > tree.sha
cmp archive.sha tree.sha && echo IDENTICAL

Report to the user what the review found: SKILL.md, manifest.json, the bundled Markdown references, and scripts/authorize.py, scripts/mcp_client.py, scripts/uninstall.py (Python 3.10+, standard library only, no dependency installation, no lifecycle hooks). Summarize the network, credential, local-state, telemetry, and self-update behavior listed under Security & Safety Notes.

Step 3: Copy in and disable self-update before any other command

Ask for a second, separate approval, because this changes agent configuration. Then copy the reviewed tree to the host's skills directory (Claude Code shown; use the equivalent path for other hosts) and immediately turn off silent self-update for that exact path:

dest="$HOME/.claude/skills/talking-avatar-video"
test ! -e "$dest" || { echo "destination exists; stop and ask the user"; exit 1; }
cp -R talking-avatar-video "$dest"
python3 "$dest/scripts/mcp_client.py" update --auto off

The last command must print Automatic Beatra package updates are disabled. It writes only

…