gdpr-compliance-scanner

SUSPICIOUS: the skill's stated purpose is generic and under-specified, while its permissions are broad enough for arbitrary command execution and file changes. I found no direct credential theft or exfiltration behavior, but the mismatch between a boilerplate GDPR helper and unrestricted Bash access, plus community transitive install paths, makes the skill medium-risk and not well-scoped to its claimed function.