regulatory-compliance

SUSPICIOUS: the core compliance guidance is benign, but the first-activation behavior adds unnecessary local directory inspection and prompts transitive installation of third-party skills from an unrelated publisher. No direct credential theft or exfiltration is evident, but the skill’s actual footprint is broader than its stated compliance purpose.