acpx

SUSPICIOUS: The skill's core behavior matches its stated purpose, and the main installer appears to be an official npm distribution rather than a covert payload. However, it expands trust to multiple downstream agent adapters fetched via npm/npx, includes an arbitrary --agent execution escape hatch, persists auth/config locally, and can drive coding agents over untrusted repo/PR content with broad approval modes. This is more a workflow-security and supply-chain risk than confirmed malware.