hermes-hudui-consciousness-monitor

Warn

Audited by Socket on May 17, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

Overall this skill is suspicious rather than malicious. Its purpose broadly matches its capabilities as a local Hermes monitoring UI, but the install trust is weaker than ideal because ara.so publishes the skill while the software is installed from an unrelated GitHub account via repo clone and install.sh. Data access is broad but proportionate to a dashboard that monitors Hermes internals, and the documented data flow appears local with no obvious third-party credential routing.

Confidence: 82%Severity: 56%
Audit Metadata
Analyzed At
May 17, 2026, 12:33 AM
Package URL
pkg:socket/skills-sh/Aradotso%2Fhermes-skills%2Fhermes-hudui-consciousness-monitor%2F@93b260b78cdf6ee10dd47ddf65b8ec5262e333c2
Security Audit — socket — hermes-hudui-consciousness-monitor