signicat

SUSPICIOUS: the skill’s stated Signicat purpose is plausible, and the CLI install source appears vendor-consistent, but the actual data flow routes Signicat authentication and API traffic through Membrane as an intermediary. That third-party credential and data mediation is disproportionate to a direct Signicat integration and creates meaningful trust and data-flow risk.