implement-acp-client — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited implement-acp-client (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
This skill provides a standardized workflow for integrating AI agents into desktop or web applications using the Agent Client Protocol (ACP).
pip install acp-sdkImplement the acp.interfaces.Client protocol. This is where you map protocol requests (like read_text_file) to your application's logic.
ext_method to expose custom host tools (e.g., execute_command, get_editor_state).If your application uses a non-asyncio event loop (like Qt, Tkinter, or FreeCAD), you must run the ACP SDK in a background thread.
QThread (Qt) or threading.Thread to run an asyncio loop.acp.spawn_agent_process(command, client_impl). This handles the stdio pipe and JSON-RPC lifecycle automatically.AsyncSseClient or similar for HTTP/WebSockets.Agents need to know what custom tools are available. Since ACP doesn't have a mandatory tool discovery endpoint for extensions yet, you should:
For sensitive tools (file writes, script execution), always implement request_permission.
AllowedOutcome.ALLOW or DENY.acp-sdk (agentclientprotocol/python-sdk), not platform-specific versions unless intended..stop() on your thread and proc.kill() if necessary.~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.