The bug essentially means a rogue app could slip in and grab your data. Android Police have created an app calle Skypwned which proves the problem is there.

While just asking for basic Android storage and phone permissions, Skypwned is able to grab your full name and phone number and list all your contacts even without your Skype username. Skype is investigating the issue. Let’s hope it plugs that hole sharpish.