AI Headshot Generator Skill

Overview

Turn a casual selfie into a professional headshot with a new background, business attire, and studio lighting for resumes, company websites, career profiles, and social media, from inside Claude Code, Codex, or OpenClaw. The work is produced on the hosted, paid Beatra service (mcp.beatra.ai).

This catalog entry is a reviewed pointer, not the executable package. It contains no client code and performs no Beatra operation by itself. The package it points to bundles three standard-library Python scripts that make network calls and store a credential. It has no self-updater: it never downloads code and never changes its own files. Read Install and Security & Safety Notes before activating it.

Pinned identity	Value
Package	ai-headshot-studio 0.2.2
Source commit	beatra-ai/ai-headshot-generator-skill@c5a2ab9 (full SHA c5a2ab9483f81b36b501a16868516f960ec84ede)
Package tree	14b395322c83d66604701fca1cb2b2e0dcc0abce (Git tree ID of skills/ai-headshot-studio at that commit)
License	MIT No Attribution (MIT-0)

The pinned tree holds regular files only (no symlinks, no executable bits, no binaries). Confirm that with the inspect commands below.

When to Use This Skill

• Use when the user explicitly wants AI Headshot Generator work produced on Beatra and accepts that it is paid.
• Use when they have agreed to send prompts and any reference images to a third party.
• Do not use for local-only image editing or when no paid render was approved.

Install (pinned, verified, approved twice)

Step 1: Fetch the pinned tree into a review directory

Explain that this fetches an external package from github.com, then ask for approval. Only after approval:

set -e
umask 077
review_dir="$(mktemp -d)"
cd "$review_dir" || exit 1
git clone --quiet --filter=blob:none --no-checkout https://github.com/beatra-ai/ai-headshot-generator-skill.git src
git -C src checkout --quiet c5a2ab9483f81b36b501a16868516f960ec84ede -- skills/ai-headshot-studio
test "$(git -C src rev-parse 'c5a2ab9483f81b36b501a16868516f960ec84ede:skills/ai-headshot-studio')" = '14b395322c83d66604701fca1cb2b2e0dcc0abce' && echo TREE-OK

Stop if the last command does not print TREE-OK. The expected commit and tree IDs come from this catalog entry, not from the package or its website, and Git addresses every fetched object by its hash.

Step 2: Inspect before activation

git -C src ls-tree -r c5a2ab9483f81b36b501a16868516f960ec84ede -- skills/ai-headshot-studio | awk '$1 != "100644"'  # expect no output
grep -n -E 'maybe_auto_update|download_update|_apply_update' src/skills/ai-headshot-studio/scripts/mcp_client.py  # expect no output

The first check lists any symlink, executable, or submodule entry; the second finds the entry points of the self-updater that earlier versions shipped.

Report to the user what the review found: SKILL.md, manifest.json, install-source.json (the one-line marker {"schema_version":1,"source":"github"}), the bundled Markdown references, and scripts/authorize.py, scripts/mcp_client.py, scripts/uninstall.py (Python 3.10+, standard library only, no dependency installation, no lifecycle hooks). Summarize the network, credential, local-state, telemetry, and version-notice behavior listed under Security & Safety Notes.

The manifest and pattern scans above are only inventory aids. Before activation, read every file in the pinned tree, including each script, reference and hook, and inspect all dependency and network behavior. Do not claim source review from grep output. If complete review cannot be performed, stop before copying or executing; ask for a separate review rather than treating a digest as evidence of safety.

Step 3: Copy in

Obtain explicit authorization for this host configuration change if it is not already covered by the user's request; do not repeat an existing scoped approval. Then copy the reviewed tree to the host's skills directory (Claude Code shown; use the equivalent path for other hosts):

dest="$HOME/.claude/skills/ai-headshot-studio"
test ! -e "$dest" && test ! -L "$dest" || { echo "destination exists; stop and ask the user"; exit 1; }
cp -R "src/skills/ai-headshot-studio" "$dest"

There is no update switch to turn off in this version.

Step 4: Authorize as its own decision

Authorization opens a browser sign-in and stores a bearer token. Ask first.

python3 "$dest/scripts/authorize.py"

Start a new agent session if the host discovers skills only at startup.

How It Works

1. Read the installed package's SKILL.md and its references; they define the routes, payload shapes, and review loop.
2. Use free, non-