Suspicious: acp-bridge - AGENT.md | Skillgate
Skillgate scanned AGENT.md in acp-bridge and rated it Suspicious with a risk score of 62/100 (7 detections).
Skillgate found behaviour that needs a human decision: it may be a legitimate but powerful pattern, or an attack. Review the flagged lines in the source before installing.
What was found
- SG-020 Persistence Mechanism - CRITICAL: Crontab, rc files, systemd, LaunchAgents, SSH key injection, registry run keys
- SG-027 Lateral Movement - CRITICAL: AWS/GCP/Azure cross-account pivots, SSH lateral movement, CI/CD token abuse, port forwarding
- SG-025 Backdoor Trigger Phrase - HIGH: Keyword triggers, password gates, staged execution, trust-building deception patterns
- SG-092 Command-file exfiltration shape - MEDIUM: Instruction file (slash-command, sub-agent, hook, skill, or CLAUDE.md / .cursorrules) co-occurs an external HTTP egress verb, a hardcoded destination identifier, and an env-secret materialization within a single block. Severity is raised to HIGH when the file path is `.claude/commands/`, `.claude/agents/`, or the .codex/ equivalents - those paths are auto-trusted on user invocation.
- SG-097 Fetch-and-Execute - MEDIUM: Network-fetched content executed as code (pipe-to-shell, process substitution, eval, render-then-run, download-then-run)
- SG-037 Cleartext Secrets in Config - LOW: Cleartext secrets in env / config files
- SG-092 Command-file exfiltration shape - LOW: Instruction file (slash-command, sub-agent, hook, skill, or CLAUDE.md / .cursorrules) co-occurs an external HTTP egress verb, a hardcoded destination identifier, and an env-secret materialization within a single block. Severity is raised to HIGH when the file path is `.claude/commands/`, `.claude/agents/`, or the .codex/ equivalents - those paths are auto-trusted on user invocation.
What to do
Read the flagged lines in the source file yourself before installing it or letting an agent load it. Every detection above links to the rule that fired, with the conditions that trigger it and remediation where one exists. Open the interactive report for evidence lines and context.
About Skillgate
Skillgate is a free scanner from Mitiga Labs for AI agent skills, hooks, MCP configs, and instruction files (SKILL.md, CLAUDE.md, AGENTS.md, .cursorrules, .claude/settings.json). It runs static rules plus an LLM judge and maps each finding to a known attack technique. Static analysis only: it never executes the file it scans. No scanner is 100% accurate - a verdict is a signal, not a guarantee. Browse all detection rules.