Security audit
Receipt Scanner
Security checks across malware telemetry and agentic risk
Overview
This skill appears to perform receipt OCR and PDF conversion as advertised; the main thing to know is that selected receipts are sent to PDFAPIHub and an API key is required.
Before installing, be aware this is not fully local OCR: selected receipts are posted to PDFAPIHub and the plugin needs a PDFAPIHub API key. Use a dedicated/revocable key, watch quotas, and avoid uploading receipts with sensitive details you are not comfortable sharing with that provider.
VirusTotal
VirusTotal engine telemetry is currently stale for this artifact.
Static analysis
No suspicious patterns detected.