codesign reports invalid Info.plist on an app dl'ed from the internet. Has the app been possibly compromised?
It’s quite likely a developer uploaded something incorrectly codesigned. As a developer myself, I know it takes time to get it right, and many don’t bother.