acpx

SUSPICIOUS: the skill’s purpose and capabilities are broadly aligned, and npm installation is normal, but it materially expands trust by spawning many third-party agent CLIs via unpinned npx commands, supports arbitrary custom agent commands, and can auto-approve downstream permissions. This is a coherent orchestration tool, not confirmed malware, but it carries meaningful supply-chain and autonomy risk.