The Agent Skills Directory

[COMMAND_EXECUTION]: The skill uses the exec tool to run shell commands for session management and tool execution. It also executes dynamic Node.js code via node -e to check package versions in SKILL.md.
[EXTERNAL_DOWNLOADS]: Fetches the acpx package and various coding adapters (e.g., pi-acp, opencode-ai) from the official NPM registry as described in SKILL.md.
[REMOTE_CODE_EXECUTION]: Uses npx to download and run code for coding harness adapters directly from the NPM registry (SKILL.md).
[PROMPT_INJECTION]: The skill exhibits an indirect prompt injection surface by relaying untrusted user input to external coding harnesses.
Ingestion points: User requests for coding harness tasks in SKILL.md
Boundary markers: Absent from templates for passing prompts to acpx in SKILL.md
Capability inventory: Shell command execution via exec and package installation via npm in SKILL.md
Sanitization: No sanitization or validation of user input is specified in SKILL.md

acp-router