Sure. If you have the localrc thing installed, anyone who can write files you can read can make your vim do *anything* (and I mean *anything*).I thought that modern versions of localrc run .local.vimrc scripts in a sandbox?
Ok, looks like Markus Braun's http://www.vim.org/scripts/script.php?script_id=441 does this.
Thinca's plugin currently indeed allows arbitrary code execution. -Y
