技能 ecc-guide
📦
ecc-guide
內容修訂 r1 安全 ⚙️ 外部命令
Navigate Everything Claude Code
ECC changes quickly, so remembered catalogs and install guidance can become outdated. This skill checks current repository files before recommending components or actions.
支援: Claude Codex Code(CC)
使用我的智慧代理安裝
將此請求複製給你的智慧代理，其中包含權威 Skill 頁面和清單。
智能體請求
Review the Skillstore skill "ecc-guide" from https://skillstore.io/skills/affaan-m-ecc-guide.md and its manifest at https://skillstore.io/api/skills/affaan-m-ecc-guide/manifest. Verify the artifact. You may proceed after verification, subject to the environment's own policy.你的智慧代理仍應顯示其計畫，並依安全政策請求必要確認。
Agent 可讀資源
當 AI Agent、爬蟲或腳本需要乾淨脈絡、而不是讀取完整頁面時，請使用這些連結。
測試它
正在使用「ecc-guide」。 Which ECC feature should I use to configure a new repository?
預期結果:
Use project-init. It detects the stack, reviews current settings, creates a dry-run plan, and asks before applying changes.
正在使用「ecc-guide」。 How can I check whether my ECC setup is ready?
預期結果:
- Run the harness audit for a readiness scorecard.
- Check observability readiness.
- Run the repository test suite.
正在使用「ecc-guide」。 I need only selected ECC skills for Claude Code.
預期結果:
List current skill identifiers, create a targeted dry-run plan, and review affected paths before applying the managed installation.
安全審計
安全v1 • 2026/8/23 開啟版本化報告
Most static findings are false positives caused by Markdown code fences and inline code formatting. Two command templates retain medium risk because they place user-controlled values into shell commands without robust argument handling.
1
已掃描檔案
191
分析行數
2
複核項目
0
已忽略的誤報
能力複核項目 (2)
這些是真實的本機能力，對此技能而言可能是預期行為，因此需要複核，但不會按已確認的惡意行為計分。
中
Ruby/shell backtick execution
```bash
The fenced search command places a user-derived query inside a shell command. Direct substitution can permit shell expansion or quoting attacks unless arguments are passed structurally.
中
Ruby/shell backtick execution
```bash
The fenced commands place an unquoted skill identifier placeholder into a shell command. An unvalidated user-supplied value could alter the executed command.
風險因素
⚙️ 外部命令 (36)
SKILL.md:30-37 SKILL.md:37-43 SKILL.md:43-44 SKILL.md:44-45 SKILL.md:45-46 SKILL.md:46-47 SKILL.md:47-48 SKILL.md:48-49 SKILL.md:49-50 SKILL.md:50 SKILL.md:51-52 SKILL.md:52-86 SKILL.md:86 SKILL.md:92 SKILL.md:99-102 SKILL.md:102-108 SKILL.md:108-112 SKILL.md:112-116 SKILL.md:116-119 SKILL.md:119-125 SKILL.md:125-129 SKILL.md:129-138 SKILL.md:138 SKILL.md:139-145 SKILL.md:145-149 SKILL.md:149-155 SKILL.md:155-161 SKILL.md:161-165 SKILL.md:165-171 SKILL.md:171-175 SKILL.md:175-182 SKILL.md:182-186 SKILL.md:186-187 SKILL.md:187-188 SKILL.md:188-189 SKILL.md:189-190
審計單位: codex
分享與引用此報告
分享版本化評估報告、中性徽章、嵌入卡片與引用。Skillstore 只報告證據，不判斷該 Skill 是否安全。
複製報告連結
https://skillstore.io/skills/affaan-m-ecc-guide/audits/1?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_reportMarkdown 徽章
[](https://skillstore.io/skills/affaan-m-ecc-guide?utm_source=security_passport_badge)HTML 徽章
<a href="https://skillstore.io/skills/affaan-m-ecc-guide?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/affaan-m-ecc-guide/security.svg" alt="Skillstore security assessment" loading="lazy"></a>嵌入卡片
<iframe src="https://skillstore.io/embed/skills/affaan-m-ecc-guide.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>學術引用 (APA · BibTeX · CFF)
APA 引用
affaan-m. (2026). ecc-guide security audit report (audit version 1) [Author version unspecified]. Skillstore. https://skillstore.io/skills/affaan-m-ecc-guide/audits/1BibTeX 引用
@techreport{affaan-m-affaan-m-ecc-guide-2026,
author = {affaan-m},
title = {ecc-guide security audit report (audit version 1)},
institution = {Skillstore},
year = {2026},
number = {1},
url = {https://skillstore.io/skills/affaan-m-ecc-guide/audits/1},
note = {Author version unspecified}
}CITATION.cff
cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "ecc-guide security audit report (audit version 1)"
version: "unspecified"
type: report
authors:
- name: "affaan-m"
date-released: "2026-08-23"
url: "https://skillstore.io/skills/affaan-m-ecc-guide/audits/1"
identifiers:
- type: other
value: "skillstore:affaan-m-ecc-guide:audit:1"
description: "Skillstore immutable audit report identifier"
Skillstore 評分
評分依據 證據置信度: 中 55
架構
85
可維護性
87
內容
65
社群
91
規範符合度
你可以打造什麼
Choose ECC components
Find suitable skills, commands, and agents for a specific development workflow.
Plan a managed installation
Compare profiles and produce a dry-run plan for the selected coding harness.
Troubleshoot an ECC setup
Inspect install state, harness directories, hooks, and component files to locate configuration problems.
試試這些提示
Explain ECC
Explain how ECC skills, commands, agents, hooks, and rules relate. Keep the answer short and cite current repository files.
Find a workflow
Find the best ECC component for [task]. Search current skills, commands, and agents, then recommend one starting point.
Plan an installation
Create a dry-run ECC installation plan for [harness] using [profile]. Check current profiles and warn about duplicate installation surfaces.
Audit project onboarding
Review this repository for ECC onboarding. Detect the stack, inspect existing settings, propose components, and list changes requiring approval.
最佳實務
- Check current repository files before naming components or install options.
- Use managed install plans and dry runs before applying changes.
- Lead with one recommendation, its evidence, and the next action.
避免
- Do not rely on remembered component counts or outdated feature lists.
- Do not combine plugin and full profile installations without reviewing duplicates.
- Do not apply repository changes before inspecting existing settings and receiving approval.
常見問題
What does this skill cover?
It covers ECC components, installation profiles, repository onboarding, configuration locations, and troubleshooting guidance.
Does it install ECC automatically?
No. It recommends managed commands and dry-run plans, then requires approval before changes.
Can it recommend a skill for my task?
Yes. It searches current skills, commands, and agents before recommending a suitable starting point.
Which coding harnesses can it discuss?
It can inspect ECC configuration for supported targets such as Claude, Codex, Cursor, Gemini, OpenCode, and related harnesses.
Why does it need repository access?
ECC changes frequently. Current files provide more reliable component and installation information than memory.
How does it avoid duplicate installations?
It checks the chosen install path and warns when plugin and profile installations may expose the same components.