grammarly-prod-checklist
Pass
Audited by Gen Agent Trust Hub on Sep 3, 2026
Risk Level: SAFE
Full Analysis
- [DATA_EXPOSURE_EXFILTRATION]: The skill includes a validation script that accesses the
GRAMMARLY_API_KEYenvironment variable. This access is limited to authenticating against official Grammarly API endpoints for connectivity testing. The instructions explicitly require that credentials and raw text be excluded from any generated readiness receipts. - [EXTERNAL_DOWNLOADS]: The skill references documentation and status pages from official Grammarly domains. These are well-known services used for legitimate developer support and do not represent a security risk.
- [DYNAMIC_EXECUTION]: A TypeScript code snippet is provided to automate health checks. This script is a transparent utility that performs standard API connectivity and usage verification without incorporating untrusted external inputs or performing unauthorized file system operations.
Audit Metadata