acp-router
Route plain-language requests for Claude Code, Cursor, Copilot, OpenClaw ACP, OpenCode, Gemini CLI, Qwen, Kiro, Kimi, iFlow, Factory Droid, Kilocode, or explicit ACP harness work into either OpenClaw ACP runtime sessions or direct acpx-driven sessions ("telephone game" flow). For coding-agent thread requests, read this skill first, then use only `sessions_spawn` for thread creation. Codex chat binding defaults to the native Codex app-server plugin unless ACP is explicit or background spawn needs ACP.
- Created
- 11 months ago
- Last commit
- 2 days ago
- Latest release
- v2026.9.85 days ago
Security Findings
Unpinned dependencies
SuspiciousLineage2 unpinned: @openclaw/ai, @openclaw/session-url-contract
Workflow makes outbound network call
SuspiciousLineage[.github/workflows/ci.yml] curl -fsS --connect-timeout 2 --max-time 5 -X PUT -H 'X-aws-ec2-metadata-token-ttl-seconds: 60' http://169.254.169.254/l
pull_request_target with secrets
MaliciousLineage[.github/workflows/auto-response.yml] pull_request_target with secrets
Versions
2- Scanned Oct 3, 2026, 12:41 PMMedium
- Scanned Jul 19, 2026, 10:01 AMMedium