compliance-notification-dispatcher

SUSPICIOUS: The business purpose is coherent, but the skill grants an agent authority to send compliance emails and modify reimbursement records without explicit per-action approval. No clear malicious installer or exfiltration endpoint is present, so this looks more like a high-impact automation skill with under-specified controls than malware.