This plugin has no README in the catalog yet.
vt-check
VirusTotal reputation for downloads and links. Files are hashed locally and looked up by SHA-256 — never uploaded. URLs are checked read-only, and archives are inspected in memory for path traversal, decompression bombs, double extensions and document-named executables. Disclosure — network calls to www.virustotal.com (SHA-256 hash, URL, domain and IP lookups with the user's VT_API_KEY); vt_check_url with submit=true, which the model sets, POSTs the URL to VirusTotal for a new scan and makes it public there; vt_check_file reads (hashes and inspects in memory) whatever local path it is given, and the file itself is never uploaded; no shell, no background processes, no telemetry; lookup cache in plugin state; credential read via get_secret.
About
VirusTotal reputation for downloads and links. Files are hashed locally and looked up by SHA-256 — never uploaded. URLs are checked read-only, and archives are inspected in memory for path traversal, decompression bombs, double extensions and document-named executables. Disclosure — network calls to www.virustotal.com (SHA-256 hash, URL, domain and IP lookups with the user's VT_API_KEY); vt_check_url with submit=true, which the model sets, POSTs the URL to VirusTotal for a new scan and makes it public there; vt_check_file reads (hashes and inspects in memory) whatever local path it is given, and the file itself is never uploaded; no shell, no background processes, no telemetry; lookup cache in plugin state; credential read via get_secret.

Aravinth-Earth