grammarly-webhooks-events
Pass
Audited by Gen Agent Trust Hub on Sep 3, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill provides implementation examples that interact with Grammarly's official API endpoints (api.grammarly.com). This is a well-known service and the usage is consistent with the skill's intended purpose.- [INDIRECT_PROMPT_INJECTION]: The skill includes logic for processing user-provided text content through the Grammarly plagiarism API.
- Ingestion points: The
textvariable in theplagiarismWithCallbackfunction (SKILL.md) serves as the entry point for external data. - Boundary markers: Untrusted data is encapsulated within a JSON body for the API request.
- Capability inventory: The skill leverages the
fetchtool for network operations (SKILL.md) to communicate with Grammarly services. - Sanitization: Input is passed through
JSON.stringifyto ensure correct data formatting, though it is not treated as instructions within the skill logic.
Audit Metadata