grammarly

Warn

Audited by Socket on Apr 28, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS. The skill's stated purpose is Grammarly access, but its actual footprint is a Membrane-platform integration that installs a third-party CLI, requires a Membrane account, and routes authentication and data through Membrane rather than Grammarly's official direct API. The install path is not overtly malicious, but the intermediary credential/data flow and broadened trust boundary make the skill higher risk than a normal first-party Grammarly integration.

Confidence: 87%Severity: 72%
Audit Metadata
Analyzed At
Apr 28, 2026, 10:57 PM
Package URL
pkg:socket/skills-sh/membranedev%2Fapplication-skills%2Fgrammarly%2F@1d8957595367d99d002616bacabe7b90e71a4cb8