logos-router-reasoning

Warn

Audited by Socket on Sep 16, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS. The main issue is install trust and purpose-source mismatch: a skill branded as Logos Router by ara.so directs installation from an unrelated personal GitHub repo with no verifiable same-org release trail, while examples reference a logos package not clearly installed by the documented steps. Data flows stay local/mesh-oriented and there is no clear credential theft or malicious exfiltration, but the supply-chain inconsistency is substantial enough to treat the skill as high risk.

Confidence: 89%Severity: 74%
Audit Metadata
Analyzed At
Sep 16, 2026, 10:35 PM
Package URL
pkg:socket/skills-sh/reason-machines%2Fmcp-skills%2Flogos-router-reasoning%2F@5bfe37a52723cb18f8fe2586b0c577cf1a76b287347d5cf201160cdbf0dfe639
Security Audit — socket — logos-router-reasoning