hermes-labyrinth-observability

Warn

Audited by Socket on Sep 12, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS. The skill’s read-only observability behavior is broadly consistent with its stated purpose, and documented data flows remain local. Main concern is install trust: ara.so presents the skill, but the actual code is cloned from an unrelated personal GitHub repo, making provenance weaker than an official Hermes catalog/plugin source.

Confidence: 88%Severity: 56%
Audit Metadata
Analyzed At
Sep 12, 2026, 06:51 PM
Package URL
pkg:socket/skills-sh/reason-machines%2Fhermes-skills%2Fhermes-labyrinth-observability%2F@19553c30b6efd737df3a9a9077b41efa111d9e97b879cd86e875f875c090bb9f
Security Audit — socket — hermes-labyrinth-observability