acp-router

    Route plain-language requests for Claude Code, Cursor, Copilot, OpenClaw ACP, OpenCode, Gemini CLI, Qwen, Kiro, Kimi, iFlow, Factory Droid, Kilocode, or explicit ACP harness work into either OpenClaw ACP runtime sessions or direct acpx-driven sessions ("telephone game" flow). For coding-agent thread requests, read this skill first, then use only `sessions_spawn` for thread creation. Codex chat binding defaults to the native Codex app-server plugin unless ACP is explicit or background spawn needs ACP.

    Rank#3500
    openclawgithubWorkflow391,537Last updated Oct 3, 2026, 12:41 PMgithub/openclaw/openclaw/extensions/acpx/skills/acp-router
    Created
    11 months ago
    Last commit
    2 days ago
    Latest release
    v2026.9.85 days ago

    Security Findings

    Unpinned dependencies

    SuspiciousLineage

    2 unpinned: @openclaw/ai, @openclaw/session-url-contract

    Workflow makes outbound network call

    SuspiciousLineage

    [.github/workflows/ci.yml] curl -fsS --connect-timeout 2 --max-time 5 -X PUT -H 'X-aws-ec2-metadata-token-ttl-seconds: 60' http://169.254.169.254/l

    pull_request_target with secrets

    MaliciousLineage

    [.github/workflows/auto-response.yml] pull_request_target with secrets

    Versions

    2
    • Scanned Oct 3, 2026, 12:41 PMMedium
    • Scanned Jul 19, 2026, 10:01 AMMedium