acp-router

• Analyzed: May 15, 2026, 6:04 AM
• Findings: 1
• Version: 1.0.0
• Hash: 39b672b1f148a1ea7a54f3260b2da39088489203aaf1d8f3cd7b2d85f35124b2
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill bundle contains instructions in `SKILL.md` for the AI agent to perform high-risk system operations, including installing the `acpx` package via `npm`, deleting configuration files (`~/.acpx/config.json`), and restarting the gateway service. It explicitly directs the agent to automate these installations and repairs without seeking user permission. While these actions are aligned with the stated purpose of managing ACP coding harnesses (e.g., Claude, Codex), the automated execution of shell commands and software installation poses a significant security risk.