infisical

SUSPICIOUS. The install path itself is relatively legitimate, but the skill's actual footprint centers on a third-party integration layer that receives and brokers Infisical access. For an Infisical-specific skill, routing secrets operations through Membrane is broader than necessary and creates avoidable credential/data-flow risk, though there is not enough evidence to call it malware.