Ecc
The agent harness performance optimization system. Skills, instincts, memory, security, and research-first development for Claude Code, Codex, Opencode, Cursor and beyond.
Last verified:
What is Ecc?
ECC Tools is a GitHub App and open-source ecosystem for teaching AI coding assistants how a repository actually works. It analyzes repo history, diffs, and config patterns, then turns those signals into reusable skills, commands, agents, hooks, and guardrails for tools like Claude Code, Codex, Cursor, and OpenCode.
The product is built around a review-first workflow. On a repository, you install the app, run an analysis through an issue or PR comment, and review a generated pull request that proposes repo-specific guidance such as SKILL.md files, defaults, and safety checks. That keeps changes visible and editable before anything lands.
ECC also includes AgentShield, an open-source security layer that scans agent configs, hooks, MCP surfaces, and prompt inputs for prompt injection, guardrail gaps, config drift, and other risks. The site frames this as a separate protection layer that can be used locally first, then automated through the GitHub App when teams need repo-native review and reporting.
It is aimed at developers and teams that want to standardize AI coding workflows without rebuilding their setup from scratch. The website emphasizes three adoption paths: a local OSS install, a public-repo GitHub App path, and a private-repo / enterprise rollout path for teams that need governance, SSO, audit logs, or dedicated onboarding.
Ecc pricing
Pricing model: Freemium
Free is $0/month and is meant for OSS-first use and public repository analysis. It includes the open-source ECC install, public-repo GitHub App analysis, 10 analyses per month, 200 commits per run, issue-comment triggered PRs, community support, and no billing setup. Pro is $19 per active developer seat per month. It adds private repo analysis, PR-triggered config audits, 50 analyses per active seat pooled on the installation, optional metered overage, 1,000 commits per run, AgentShield-backed scanning, auto-triggers on large pushes and PRs, a billing portal, and priority support. Enterprise is contact sales only. It includes unlimited analyses, 5,000 commits per run, SSO-ready governance, audit log surfaces, custom rules and policy packs, dedicated onboarding, SLA support, org-wide rollout, and procurement support. The open-source repository itself remains MIT-licensed and free, while the paid plans apply to the hosted GitHub App, automation, private-repo workflows, and enterprise controls.
Ecc pros
- Works across Claude Code, Codex, Cursor, and OpenCode
- Turns repo history into team-specific guidance
- Generates reviewable pull requests instead of silent changes
- Public repositories can start free
- Open-source core stays available locally
- Includes 181 skills in the OSS layer
- Includes 47 agents in the OSS layer
- Includes 79 reusable commands
- AgentShield scans every agent session
- 102 security rules are built into the scanner
- Checks prompt injection risks
- Checks config drift and guardrail gaps
- Supports selective install profiles
- Offers issue-comment triggered analysis
- Supports PR-triggered config audits on paid plans
- Supports private repository analysis on Pro
- Includes pooled usage for team installs
- Offers metered overage for heavier usage
- Includes enterprise governance and audit logs
- Keeps review and merge control with the team
Ecc cons
- Private repo access requires Pro
- Enterprise pricing is not self-serve
- Free tier is limited to public repositories
- Free tier allows only 10 analyses per month
- Free tier caps runs at 200 commits each
- Pro pricing is per active seat
- Deep security scanning is tied to paid plans
- Enterprise features are gated behind sales contact
- The app depends on GitHub workflows for full value
- Some rollout and governance features are preview-oriented
- Local setup and repo onboarding still require configuration
- The product spans multiple layers and may feel complex
- Some features vary by install path and harness
- Usage limits apply differently across plans
- Advanced org controls are not included in Free
Frequently asked questions about Ecc
What does ECC Tools actually do?
ECC Tools analyzes a repository’s git history, diffs, and metadata to infer how a team works, then generates reusable skills, commands, agents, hooks, and guardrails. The result is usually delivered as a reviewable pull request so the team can inspect and merge the guidance before it becomes part of the repo.
How do I start using it on a repository?
Install the ECC Tools GitHub App on the repository or organization, then comment /ecc-tools analyze on an issue or pull request. ECC generates a PR with suggested repo-specific defaults and guidance, which you review and merge if it fits.
What tools and harnesses does it support?
The site says ECC works across Claude Code, Codex, Cursor, and OpenCode. It also presents the OSS install as the base layer so you can use the skills, agents, commands, and hooks locally before adding the GitHub App.
What is AgentShield?
AgentShield is ECC’s security layer for AI agent configs and related surfaces. It scans files such as CLAUDE.md, .cursorrules, agents.json, hooks, and MCP-related surfaces to detect issues like prompt injection, missing guardrails, and configuration weaknesses.
Is the open-source part free?
Yes. The OSS repository and its install path are free and MIT-licensed. The paid plans are for the hosted GitHub App, private repo workflows, recurring automation, and enterprise-grade controls.
What is included in the Free plan?
Free is intended for public repositories and evaluation. It includes public-repo GitHub App analysis, 10 analyses per month, 200 commits per run, issue-comment triggered PRs, the free OSS install, and community support.
What does Pro add?
Pro adds private repository analysis, PR-triggered audits, 50 analyses per active developer seat pooled across the installation, optional metered overage, 1,000 commits per run, AgentShield-backed scanning, auto-triggers on large pushes and PRs, self-serve billing, and priority support.
What does Enterprise add?
Enterprise is for organizations that need broader rollout and governance. It adds unlimited analyses, 5,000 commits per run, custom rules and policy packs, SSO-ready governance, audit logs, dedicated onboarding, SLA support, and procurement help.
Does ECC store my code permanently?
The pricing page says analyses are performed by reading commit history and sample file contents in memory, and that code is not permanently stored. It also says the generated SKILL.md is what appears in the pull request.
Can I recover an existing paid install without paying again?
Yes. The pricing page says that if you already purchased Pro and only wiped your local setup, you should use the same billing email to open the portal and reinstall ECC on the same GitHub account or organization. It specifically says buying again is only for a new installation or a different organization.