ecc-tools-cost-audit

ecc-tools-cost-audit is a skill in affaan-m/ECC, last changed 1 Oct 2026. It is instructions only: no scripts, no named hosts and no pre-approved tools. Our pattern check flagged nothing at commit 25278e7 on 26 Oct 2026.

Pattern check: nothing flagged · commit 25278e7 · 26 Oct 2026

Install
From the author
Evidence-first ECC Tools burn and billing audit workflow. Use when investigating runaway PR creation, quota bypass, premium-model leakage, duplicate jobs, or GitHub App cost spikes in the ECC Tools repo.
Licence
MIT
Repo stars
290.0k
Publisher
affaan-m
Files
1 file
Checked
25278e7 (opens in a new tab) · 26 Oct 2026

Install

Each tab says whether it installs commit 25278e7, the one we checked, or the latest version.

No tab for your agent? Use Any agent for OpenCode, Goose, Windsurf (Devin Desktop), Zed, Roo Code, Factory Droid, Junie, Amp and Antigravity, and Claude Code for Cline. Kiro needs the folder copied by hand.

Pinned to commit 25278e7, the one we checked.

From your project's root folder:

tmp="$(mktemp -d)" &&
  git clone -q --depth 1 --filter=blob:none --no-checkout https://github.com/affaan-m/ECC.git "$tmp" &&
  git -C "$tmp" fetch -q --depth 1 origin 25278e7d7b6cf6e6a4e7a6c8e10f14ff22f0eb5b &&
  git -C "$tmp" sparse-checkout set -- skills/ecc-tools-cost-audit &&
  git -C "$tmp" checkout -q 25278e7d7b6cf6e6a4e7a6c8e10f14ff22f0eb5b &&
  mkdir -p .claude/skills &&
  mkdir .claude/skills/ecc-tools-cost-audit &&
  cp -R "$tmp"/skills/ecc-tools-cost-audit/. .claude/skills/ecc-tools-cost-audit/ &&
  rm -rf "$tmp"

If Claude Code was already running and this created the skills folder, run /reload-skills.

Claude Code docs (opens in a new tab)

What it can touch

From the files and frontmatter at commit 25278e7. This is how much a skill can do, not whether it is risky.

What it can touch: Instructions only

It is instructions only: no scripts, no named hosts and no pre-approved tools.

Pattern check

Pattern check: nothing flagged · commit 25278e7 · 26 Oct 2026

We checked every text file in this skill, at commit 25278e7 on 26 Oct 2026, against 45 published patterns such as download-and-run commands, hidden text and credential access. We don't run the skill, we don't read the web pages it points to, and we can't judge everything its instructions might lead an agent to do. In published tests, pattern checks like this one missed most malicious skills. Read the skill before you install it — especially anything it asks you to download or run.

How the check worksReport an incorrect finding

Format check

Each agent reads SKILL.md a little differently. We check the file against each one's published rules; we don't run the skill in any agent.

  • Agent Skills specPasses with warnings

    The open format from agentskills.io, held to what the strictest agents enforce, so one folder loads everywhere.

    • Warning

      Paths that may not work once the skill is installed: line 12: ../../ECC-Tools (outside the skill folder). B6

      Fix: Use forward-slash paths relative to SKILL.md, and copy shared files into the skill.

    • Note

      There is no license field, so readers can't tell whether they may reuse the skill. O2

      Fix: Add license: with an SPDX name such as MIT or Apache-2.0, or the name of a bundled licence file.

  • Claude CodePasses with warnings

    Claude Code reads its own extra fields, ignores unknown ones, and still loads a skill whose frontmatter is broken, without its fields.

    • Warning

      Paths that may not work once the skill is installed: line 12: ../../ECC-Tools (outside the skill folder). B6

      Fix: Use forward-slash paths relative to SKILL.md, and copy shared files into the skill.

  • Claude apps & API uploadPasses with warnings

    Uploading to claude.ai or the Claude API, or packaging with Anthropic's script, accepts only the six spec fields and stops on anything else.

    • Warning

      Paths that may not work once the skill is installed: line 12: ../../ECC-Tools (outside the skill folder). B6

      Fix: Use forward-slash paths relative to SKILL.md, and copy shared files into the skill.

    • Note

      The description is 203 characters. The claude.ai Help Center says 200 at most, though Anthropic's API docs and validator allow 1,024. D4

      Fix: If the claude.ai upload refuses it, trim the description to 200 characters.

  • OpenAI (Codex & API)Passes with warnings

    Codex finds SKILL.md by its exact name and needs a description; OpenAI's Skills API checks the frontmatter against the spec and caps uploads.

    • Warning

      Paths that may not work once the skill is installed: line 12: ../../ECC-Tools (outside the skill folder). B6

      Fix: Use forward-slash paths relative to SKILL.md, and copy shared files into the skill.

  • VS Code & CopilotPasses with warnings

    VS Code reads skills one folder below .github/skills, .claude/skills or .agents/skills and falls back to the folder name when the name is missing or differs; GitHub's Copilot docs require the exact name SKILL.md.

    • Warning

      Paths that may not work once the skill is installed: line 12: ../../ECC-Tools (outside the skill folder). B6

      Fix: Use forward-slash paths relative to SKILL.md, and copy shared files into the skill.

SKILL.md

Files

1 file

PathSize
SKILL.md (opens in a new tab)6.3 KB

More from affaan-m/ECC

  • accessibility

    affaan-m/ECC

    Design, implement, and audit accessible UI to WCAG 2.2 Level AA across Web, iOS, and Android — semantic ARIA roles and labels, accessibility traits and hints, focus management, contrast, target size, and screen-reader support. Use when building or auditing UI for accessibility compliance, keyboard navigation, or screen-reader support.

    Pattern check: Nothing flaggedWhat it can touch: Names web addresses

    MIT · 290.0k repo stars · Updated 27 Sept 2026

  • agent-architecture-audit

    affaan-m/ECC

    Full-stack diagnostic for agent and LLM applications. Audits the 12-layer agent stack for wrapper regression, memory pollution, tool discipline failures, hidden repair loops, and rendering corruption. Produces severity-ranked findings with code-first fixes. Essential for developers building agent applications, autonomous loops, or any LLM-powered feature. Use when an agent or LLM feature misbehaves and the failing layer is unknown, or before shipping an agent stack.

    Pattern check: Nothing flaggedWhat it can touch: Runs shell commands

    MIT · 290.0k repo stars · Updated 11 Aug 2026

  • agent-eval

    affaan-m/ECC

    Head-to-head comparison of coding agents (Claude Code, Aider, Codex, etc.) on custom tasks with pass rate, cost, time, and consistency metrics. Use when choosing between coding agents, or when a change to an agent setup needs measured pass rate, cost, and time rather than an impression.

    Pattern check: Nothing flaggedWhat it can touch: Runs shell commands · Names web addresses

    MIT · 290.0k repo stars · Updated 11 Aug 2026

  • agent-harness-construction

    affaan-m/ECC

    Design and optimize AI agent action spaces, tool definitions, and observation formatting for higher completion rates. Use when defining or revising an agent's tool set, action space, or observation format.

    Pattern check: Nothing flaggedWhat it can touch: Instructions only

    MIT · 290.0k repo stars · Updated 11 Aug 2026

  • agent-introspection-debugging

    affaan-m/ECC

    Structured self-debugging workflow for AI agent failures using capture, diagnosis, contained recovery, and introspection reports. Use when an agent run fails and you need a reproducible diagnosis instead of a retry.

    Pattern check: Nothing flaggedWhat it can touch: Instructions only

    MIT · 290.0k repo stars · Updated 11 Aug 2026

  • agent-payment-x402

    affaan-m/ECC

    Add x402 payment execution to AI agents with per-task budgets, spending controls, and non-custodial wallets. Supports Base through agentwallet-sdk, X Layer through OKX Payments / OKX Agent Payments Protocol, and Solana plus multi-network EVM through the upstream x402 packages with facilitator-based settlement. Use when an agent must pay for something itself and needs per-task budgets, spending controls, and a non-custodial wallet.

    Pattern check: Nothing flaggedWhat it can touch: Runs shell commands · Reaches the network +1

    MIT · 290.0k repo stars · Updated 9 Oct 2026

All skills in affaan-m/ECC