Security audit
Plutus Lite — Quick Expense Summary
Security checks across malware telemetry and agentic risk
Overview
This skill is a small local expense-summary helper; the main caution is that its install command can modify the Python environment.
Install only if you are comfortable pasting expense details into an environment variable. Prefer using a virtual environment because the install command uses --break-system-packages, and note that the Lite skill displays upgrade links for a paid Pro version.
SkillSpector
By NVIDIA
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
VirusTotal
66/66 vendors flagged this skill as clean.
Static analysis
No suspicious patterns detected.