acpx

SUSPICIOUS: the skill’s purpose and capabilities mostly align, and the main install path is a normal npm package, but it materially expands trust to external agent adapters, arbitrary `--agent` commands, and optional auto-approval modes. The biggest concerns are supply-chain/credential-forwarding risk to third-party CLIs and the ability to let agents act with broad approval rather than hidden exfiltration or clearly malicious behavior.