By the letter of those conditions it would seem that the Profile AND Rig would need to be owned by the uploader - however, the spirit of the community would seem to be that it is the profile which is deemed the most valuable component. In his initial post here the OP makes it very clear he has tweaked the profile to produce the rig. This in itself represents a significant contribution to the community. (Thank you by the way!) When the profile is free this seems to be something everyone appreciates.
When it comes to murkier waters elsewhere and allegations of stealing, well... it's like the song, "Is this love?" You really ought to know
Although, unlike with love - we have Null and .kipr file analyses to guide our way...