gdpr-ccpa-privacy-auditor

SUSPICIOUS. The stated privacy-audit purpose is plausible and the supplied content shows no direct credential theft, exfiltration, or hidden execution. The main concern is install trust: the only known installation method is a transitive npx skills add from an unrelated third-party repo, unpinned and without verifiable release controls. That makes the overall skill moderately risky despite benign stated intent.