digicert

SUSPICIOUS: the skill's DigiCert purpose is plausible, and the Membrane CLI appears to come from a coherent publisher/source chain, so this is not confirmed malware. However, the actual data flow is mediated through Membrane rather than direct DigiCert APIs, requiring users to trust a third-party service with authentication and certificate-management actions; combined with the unpinned global CLI install and remote action creation, this creates medium security risk.