gdpr-ccpa-privacy-auditor

SUSPICIOUS: the stated purpose is plausible, but the skill’s mandatory dependence on unrelated external agent tooling, hosted MCP services, and persistent artifact systems is broader than needed for a privacy audit. The main concern is not direct malware behavior, but inconsistent privacy/data-flow claims and expanded trust boundaries.