grammarly

Warn

Audited by Socket on Apr 23, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: The skill's general purpose is coherent, and the install path is relatively trustworthy, but the core integration depends on a third-party Membrane account, CLI, and proxy rather than direct Grammarly API access. That makes the main risk data-flow integrity and credential delegation to an intermediary, not confirmed malware.

Confidence: 88%Severity: 58%
Audit Metadata
Analyzed At
Apr 23, 2026, 09:09 AM
Package URL
pkg:socket/skills-sh/membranedev%2Fapplication-skills%2Fgrammarly%2F@bde57261fd3280522c42b76756c48470fcd917d8