Security audit
Receipt Scanner
Security checks for vulnerabilities and agentic risk
Overview
This skill appears to perform receipt OCR and PDF conversion as advertised; the main thing to know is that selected receipts are sent to PDFAPIHub and an API key is required.
Before installing, be aware this is not fully local OCR: selected receipts are posted to PDFAPIHub and the plugin needs a PDFAPIHub API key. Use a dedicated/revocable key, watch quotas, and avoid uploading receipts with sensitive details you are not comfortable sharing with that provider.
Static analysis
No suspicious patterns detected.
