So, from virus scanners, no, there's no risk. The only software that ends up on your computer is whatever driver your computer chooses to install to talk to this as a keyboard/mouse combo. And your operating system won't automatically install a driver that is a virus.
But, what about programs just scanning all USB devices in general? Perhaps Carbon Black or McAfee?
This is a bit more complicated, and I don't have a perfect answer. But, if this helps, here's the dmesg Linux output so you can know what they might see:
From 0 to 6 seconds or so plugging it in:
[Sep30 13:58] usb 1-2.2: new low-speed USB device number 35 using xhci_hcd
[ +0.221944] usb 1-2.2: New USB device found, idVendor=16d0, idProduct=0753, bcdDevice= 2.02
[ +0.000003] usb 1-2.2: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ +5.419782] usb 1-2.2: USB disconnect, device number 35
From 6 seconds or so onward:
[ +0.914368] usb 1-2.2: new low-speed USB device number 36 using xhci_hcd
[ +0.226027] usb 1-2.2: New USB device found, idVendor=1781, idProduct=24ab, bcdDevice= 1.00
[ +0.000006] usb 1-2.2: New USB device strings: Mfr=1, Product=2, SerialNumber=0
[ +0.000004] usb 1-2.2: Product: Trinket HID Combo
[ +0.000003] usb 1-2.2: Manufacturer: Adafruit
[ +0.010374] input: Adafruit Trinket HID Combo Mouse as /devices/pci0000:00/0000:00:14.0/usb1/1-2/1-2.2/1-2.2:1.0/0003:1781:24AB.0007/input/input41
[ +0.059860] input: Adafruit Trinket HID Combo Keyboard as /devices/pci0000:00/0000:00:14.0/usb1/1-2/1-2.2/1-2.2:1.0/0003:1781:24AB.0007/input/input42
[ +0.000336] input: Adafruit Trinket HID Combo Consumer Control as /devices/pci0000:00/0000:00:14.0/usb1/1-2/1-2.2/1-2.2:1.0/0003:1781:24AB.0007/input/input43
[ +0.000161] input: Adafruit Trinket HID Combo System Control as /devices/pci0000:00/0000:00:14.0/usb1/1-2/1-2.2/1-2.2:1.0/0003:1781:24AB.0007/input/input44
[ +0.000216] hid-generic 0003:1781:24AB.0007: input,hidraw2: USB HID v1.01 Mouse [Adafruit Trinket HID Combo] on usb-0000:00:14.0-2.2/input0
Answer:
Virus scanners cannot think this device is a virus, because that's literally like a virus scanner thinking a keyboard or mouse is a virus, which doesn't make any sense, because none of the keyboard or mouse code is on your computer, it's running on microprocessors inside the keyboard or mouse itself--same as how my device works!
So, from virus scanners, no, there's no risk. The only software that ends up on your computer is whatever driver your computer chooses to install to talk to this as a keyboard/mouse combo. And your operating system won't automatically install a driver that is a virus.
But, what about programs just scanning all USB devices in general? Perhaps Carbon Black or McAfee?
This is a bit more complicated, and I don't have a perfect answer. But, if this helps, here's the
dmesgLinux output so you can know what they might see:From 0 to 6 seconds or so plugging it in:
From 6 seconds or so onward: