S

safety-guard

by @affaan-mv
4.4(20)

基于 ECC 框架,safety-guard 技能为 AI 智能体提供强大的安全防护。它能对智能体生成的内容、代码和交互进行实时扫描与审计,识别潜在漏洞、不安全行为及合规风险,确保 AI 任务的安全与可靠执行。

securityai-agentsvulnerability-scanningcode-auditingGitHub
安装方式
npx skills add affaan-m/everything-claude-code --skill safety-guard
compare_arrows

Before / After 效果对比

1
使用前

传统上,对 AI 智能体生成的复杂代码模块进行人工安全审计,耗时约 2 小时,且容易遗漏潜在漏洞,导致安全风险。

使用后

引入 safety-guard 技能后,AI 智能体生成代码的初步安全扫描可在 10 分钟内完成,大幅减少人工审查时间,并显著提升漏洞发现率。

SKILL.md

Language: English | Português (Brasil) | 简体中文 | 繁體中文 | 日本語 | 한국어 | Türkçe | Русский | Tiếng Việt | ไทย

ECC

ECC - the harness-native operator system for agentic work

Stars Forks Contributors npm ecc-universal npm ecc-agentshield GitHub App Install License Shell TypeScript Python Go Java Perl Markdown

182K+ stars | 28K+ forks | 170+ contributors | 12+ language ecosystems | Anthropic Hackathon Winner


Language / 语言 / 語言 / Dil / Язык / Ngôn ngữ

English | Português (Brasil) | 简体中文 | 繁體中文 | 日本語 | 한국어 | Türkçe | Русский | Tiếng Việt | ไทย


The harness-native operator system for agentic work. From an Anthropic hackathon winner.

Not just configs. A complete system: skills, instincts, memory optimization, continuous learning, security scanning, and research-first development. Production-ready agents, skills, hooks, rules, MCP configurations, and legacy command shims evolved over 10+ months of intensive daily use building real products.

Works across Claude Code, Codex, Cursor, OpenCode, Gemini, Zed, GitHub Copilot, and other AI agent harnesses.

ECC v2.0.0-rc.1 adds the public Hermes operator story on top of that reusable layer: start with the Hermes setup guide, then review the rc.1 release notes and cross-harness architecture.


OSS stays free. This repo is MIT-licensed forever. ECC Pro is the hosted GitHub App for private repos. Sponsors and Pro subscribers fund the work — that's why a single maintainer ships weekly across 7 harnesses.


The Guides

This repo is the raw code only. The guides explain everything.

TopicWhat You'll Learn
Token OptimizationModel selection, system prompt slimming, background processes
Memory PersistenceHooks that save/load context across sessions automatically
Continuous LearningAuto-extract patterns from sessions into reusable skills
Verification LoopsCheckpoint vs continuous evals, grader types, pass@k metrics
ParallelizationGit worktrees, cascade method, when to scale instances
Subagent OrchestrationThe context problem, iterative retrieval pattern

What's New

v2.0.0-rc.1 — Surface Refresh, Operator Workflows, and ECC 2.0 Alpha (Apr 2026)

  • Dashboard GUI — New Tkinter-based desktop application (ecc_dashboard.py or npm run dashboard) with dark/light theme toggle, font customization, and project logo in header and taskbar.
  • Public surface synced to the live repo — metadata, catalog counts, plugin manifests, and install-facing docs now match the actual OSS surface: 60 agents, 232 skills, and 75 legacy command shims.
  • Operator and outbound workflow expansionbrand-voice, social-graph-ranker, connections-optimizer, customer-billing-ops, ecc-tools-cost-audit, google-workspace-ops, project-flow-ops, and workspace-surface-audit round out the operator lane.
  • Media and launch toolingmanim-video, remotion-video-creation, and upgraded social publishing surfaces make technical explainers and launch content part of the same system.
  • Framework and product surface growthnestjs-patterns, richer Codex/OpenCode install surfaces, and expanded cross-harness packaging keep the repo usable beyond Claude Code alone.
  • ECC 2.0 alpha is in-tree — the Rust control-plane prototype in ecc2/ now builds locally and exposes dashboard, start, sessions, status, stop, resume, and daemon commands. It is usable as an alpha, not yet a general release.
  • Operator status snapshotsecc status --markdown --write status.md turns the local state store into a portable handoff covering readiness, active sessions, skill-run health, install health, pending governance events, and linked work items from Linear/GitHub/handoffs. Use ecc work-items upsert ... for manual entries, ecc work-items sync-github --repo owner/repo for PR/issue queue state, and ecc status --exit-code to fail automation when readiness needs attention.
  • Ecosystem hardening — AgentShield, ECC Tools cost controls, billing portal work, and website refreshes continue to ship around the core plugin instead of drifting into separate silos.

v1.9.0 — Selective Install & Language Expansion (Mar 2026)

  • Selective install architecture — Manifest-driven install pipeline with install-plan.js and install-apply.js for targeted component installation. State store tracks what's installed and enables incremental updates.
  • 6 new agentstypescript-reviewer, pytorch-build-resolver, java-build-resolver, java-reviewer, kotlin-reviewer, kotlin-build-resolver expand language coverage to 10 languages.
  • New skillspytorch-patterns for deep learning workflows, documentation-lookup for API reference research, bun-runtime and nextjs-turbopack for modern JS toolchains, plus 8 operational domain skills and mcp-server-patterns.
  • Session & state infrastructure — SQLite state store with query CLI, session adapters for structured recording, skill evolution foundation for self-improving skills.
  • Orchestration overhaul — Harness audit scoring made deterministic, orchestration status and launcher compatibility hardened, observer loop prevention with 5-layer guard.
  • Observer reliability — Memory explosion fix with throttling and tail sampling, sandbox access fix, lazy-start logic, and re-entrancy guard.
  • 12 language ecosystems — New rules for Java, PHP, Perl, Kotlin/Android/KMP, C++, and Rust join existing TypeScript, Python, Go, and common rules.
  • Community contributions — Korean and Chinese translations, biome hook optimization, video processing skills, operational skills, PowerShell installer, Antigravity IDE support.
  • CI hardening — 19 test failure fixes, catalog count enforcement, install manifest validation, and full test suite green.

v1.8.0 — Harness Performance System (Mar 2026)

  • Harness-first release — ECC is now explicitly framed as an agent harness performance system, not just a config pack.
  • Hook reliability overhaul — SessionStart root fallback, Stop-phase session summaries, and script-based hooks replacing fragile inline one-liners.
  • Hook runtime controlsECC_HOOK_PROFILE=minimal|standard|strict and ECC_DISABLED_HOOKS=... for runtime gating without editing hook files.
  • New harness commands/harness-audit, /loop-start, /loop-status, /quality-gate, /model-route.
  • NanoClaw v2 — model routing, skill hot-load, session branch/search/export/compact/metrics.
  • Cross-harness parity — behavior tightened across Claude Code, Cursor, OpenCode, and Codex app/CLI.
  • 997 internal tests passing — full suite green after hook/runtime refactor and compatibility updates.

v1.7.0 — Cross-Platform Expansion & Presentation Builder (Feb 2026)

  • Codex app + CLI support — Direct AGENTS.md-based Codex support, installer targeting, and Codex docs
  • frontend-slides skill — Zero-dependency HTML presentation builder with PPTX conversion guidance and strict viewport-fit rules
  • 5 new generic business/content skillsarticle-writing, content-engine, market-research, investor-materials, investor-outreach
  • Broader tool coverage — Cursor, Codex, and OpenCode support tightened so the same repo ships cleanly across all major harnesses
  • 992 internal tests — Expanded validation and regression coverage across plugin, hooks, skills, and packaging

v1.6.0 — Codex CLI, AgentShield & Marketplace (Feb 2026)

  • Codex CLI support — New /codex-setup command generates codex.md for OpenAI Codex CLI compatibility
  • 7 new skillssearch-first, swift-actor-persistence, swift-protocol-di-testing, regex-vs-llm-structured-text, content-hash-cache-pattern, cost-aware-llm-pipeline, skill-stocktake
  • AgentShield integration/security-scan skill runs AgentShield directly from Claude Code; 1282 tests, 102 rules
  • GitHub Marketplace — ECC Tools GitHub App live at github.com/marketplace/ecc-tools with free/pro/enterprise tiers
  • 30+ community PRs merged — Contributions from 30 contributors across 6 languages
  • 978 internal tests — Expanded validation suite across agents, skills, commands, hooks, and rules

v1.4.1 — Bug Fix (Feb 2026)

  • Fixed instinct import content lossparse_instinct_file() was silently dropping all content after frontmatter (Action, Evidence, Examples sections) during /instinct-import. (#148, #161)

v1.4.0 — Multi-Language Rules, Installation Wizard & PM2 (Feb 2026)

  • Interactive installation wizard — New configure-ecc skill provides guided setup with merge/overwrite detection
  • PM2 & multi-agent orchestration — 6 new commands (/pm2, /multi-plan, /multi-execute, /multi-backend, /multi-frontend, /multi-workflow) for managing complex multi-service workflows
  • Multi-language rules architecture — Rules restructured from flat files into common/ + typescript/ + python/ + golang/ directories. Install only the languages you need
  • Chinese (zh-CN) translations — Complete translation of all agents, commands, skills, and rules (80+ files)
  • GitHub Sponsors support — Sponsor the project via GitHub Sponsors
  • Enhanced CONTRIBUTING.md — Detailed PR templates for each contribution type

v1.3.0 — OpenCode Plugin Support (Feb 2026)

  • Full OpenCode integration — 12 agents, 24 commands, 16 skills with hook support via OpenCode's plugin system (20+ event types)
  • 3 native custom tools — run-tests, check-coverage, security-audit
  • LLM documentationllms.txt for comprehensive OpenCode docs

v1.2.0 — Unified Commands & Skills (Feb 2026)

  • Python/Django support — Django patterns, security, TDD, and verification skills
  • Java Spring Boot skills — Patterns, security, TDD, and verification for Spring Boot
  • Session management/sessions command for session history
  • Continuous learning v2 — Instinct-based learning with confidence scoring, import/export, evolution

See the full changelog in Releases.


Quick Start

Get up and running in under 2 minutes:

Pick one path only

Most Claude Code users should use exactly one install path:

  • Recommended default: install the Claude Code plugin, then copy only the rule folders you actually want.
  • Use the manual installer only if you want finer-grained control, want to avoid the plugin path entirely, or your Claude Code build has trouble resolving the self-hosted marketplace entry.
  • Do not stack install methods. The most common broken setup is: /plugin install first, then install.sh --profile full or npx ecc-install --profile full afterward.

If you already layered multiple installs and things look duplicated, skip straight to Reset / Uninstall ECC.

Low-context / no-hooks path

If hooks feel too global or you only want ECC's rules, agents, commands, and core

...

用户评价 (0)

发表评价

效果
易用性
文档
兼容性

暂无评价

统计数据

安装量2.9K
评分4.4 / 5.0
版本
更新日期2026年5月22日
对比案例1 组

用户评分

4.4(20)
5
25%
4
50%
3
25%
2
0%
1
0%

为此 Skill 评分

0.0

兼容平台

🔧Claude Code

时间线

创建2026年4月9日
最后更新2026年5月22日