logos-router-reasoning
Warn
Audited by Socket on Sep 16, 2026
1 alert found:
SecuritySecuritySKILL.md
MEDIUMSecurityMEDIUM
SKILL.md
SUSPICIOUS. The main issue is install trust and purpose-source mismatch: a skill branded as Logos Router by ara.so directs installation from an unrelated personal GitHub repo with no verifiable same-org release trail, while examples reference a logos package not clearly installed by the documented steps. Data flows stay local/mesh-oriented and there is no clear credential theft or malicious exfiltration, but the supply-chain inconsistency is substantial enough to treat the skill as high risk.
Confidence: 89%Severity: 74%
Audit Metadata