infisical

SUSPICIOUS. The skill is coherent in function and uses a legitimate same-vendor CLI from npm, so it does not look overtly malicious. However, its actual footprint centers on routing Infisical authentication and secret-bearing API traffic through Membrane as an intermediary, which is a notable data-flow and trust expansion for a secrets-management skill.