grammarly-debug-bundle

SUSPICIOUS. The skill’s overall purpose is coherent and it uses official Grammarly domains with no obvious supply-chain abuse, but the implementation contradicts its own privacy and redaction rules by archiving full API responses, headers, and account data. Risk is driven by over-collection and sensitive local bundle contents, not confirmed malware.