Acp Fallback

• Outcome: Review
• Latest audit: May 29, 2026 at 9:31 PM UTC
• Version:
  1.0.1

Overview

The skill has a reasonable fallback goal, but it asks agents to run a missing local shell wrapper and automatically sends tasks across multiple AI providers with limited user controls.

Review before installing. Only use this skill if the referenced fallback script is supplied from a trusted, reviewed location, and avoid sensitive tasks unless you are comfortable with the same prompt being retried across multiple providers and with local fallback logs being created.

SkillSpector

By NVIDIA

Vulnerability Patterns

• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access
• Supply Chain: Unpinned Dependencies, External Script Fetching, Obfuscated Code
• Excessive Agency: Unrestricted Tool Access, Autonomous Decision Making, Scope Creep

Findings (2)

Missing User Warnings

Medium

• Confidence: 95% confidence
• Finding: The skill explicitly describes automatic fallback across multiple external vendors, which implies the same task content may be transmitted to additional third parties without a clear user warning or consent step. In an agent setting, prompts often contain sensitive code, credentials, internal paths, or proprietary data, so silent cross-vendor retry materially increases data exposure risk.

Missing User Warnings

Low

• Confidence: 92% confidence
• Finding: The documented logging behavior indicates fallback attempts and execution metadata are written to a local log file, but it does not warn users that operational details may be persisted. Depending on implementation, logs can capture prompts, provider names, error messages, timing, or other sensitive execution context, creating unnecessary local data retention and possible disclosure to other users or processes on the system.

VirusTotal

66/66 vendors flagged this skill as clean.