hermes-labyrinth-observability
Warn
Audited by Socket on Sep 12, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS. The skill’s read-only observability behavior is broadly consistent with its stated purpose, and documented data flows remain local. Main concern is install trust: ara.so presents the skill, but the actual code is cloned from an unrelated personal GitHub repo, making provenance weaker than an official Hermes catalog/plugin source.
Confidence: 88%Severity: 56%
Audit Metadata