everything-claude-code
AI Coding ToolsA harness‑native operator system for building and running agentic workflows across multiple AI code assistants.
Features
- Cross‑harness agent platform supporting Codex, Claude Code, Cursor, OpenCode, Gemini, Zed, GitHub Copilot and more
- Built‑in skills, instincts, memory optimization and continuous learning mechanisms
- Security scanning, research‑first development tools and legacy command shims
Recent releases
View all 13 releases →- AgentShield false positive fixes
- 25+ known MCP vulnerabilities detected
- ECC Tools Pro with Stripe billing
- Selective install with --with/--without flags
- AgentShield v1.4.0 with CVE database
Full changelog
Highlights
ECC Tools Pro is live. The GitHub App now has Stripe billing with a Pro tier ($19/seat/month) for private repo analysis, 50 analyses/month, and AgentShield-backed scanning. Free tier remains at 10 analyses/month for public repos. Install at github.com/apps/ecc-tools, upgrade at ecc.tools/pricing.
Selective install is here. Install only what you need with --with and --without flags. ecc install --profile developer --with lang:typescript --with agent:security-reviewer --without skill:continuous-learning. Agent and skill component families are now in the install manifest.
12 language ecosystems. C#, Rust, Java, Kotlin, C++, Go, Python, TypeScript, Perl, PyTorch, Nuxt 4, and Flutter now have dedicated rules, agents, or skills.
AgentShield v1.4.0 ships alongside. False positive scanning fixed. CVE database with 25+ known MCP vulnerabilities. Supply chain verification. Runtime monitoring. Watch mode. PR security gate. Org-wide policy enforcement.
https://github.com/user-attachments/assets/eece2c76-7eb9-4865-a58b-f11247fd774e
What's New
Agents (28 total, +9 new)
typescript-reviewer— TypeScript/JavaScript code reviewpytorch-build-resolver— PyTorch build error resolutionjava-build-resolver— Maven/Gradle build resolutionjava-reviewer— Java code reviewrust-reviewer— Rust code reviewflutter-reviewer— Flutter/Dart code reviewharness-optimizer— Cross-harness optimizationkotlin-build-resolver— Kotlin build resolutionkotlin-reviewer— Kotlin code review
Skills (116 total, +15 new)
pytorch-patterns— PyTorch best practicesnuxt4-patterns— Nuxt 4 frontend patternscodebase-onboarding— Onboarding new contributorsarchitecture-decision-records— ADR workflowagent-eval— Head-to-head coding agent comparisondocumentation-lookup— Doc retrieval patternsbun-runtime— Bun runtime patternsnextjs-turbopack— Next.js Turbopack patterns- Plus 7 more language-specific skills
Rules (6 new language packs)
- C# (coding-style, patterns, security, testing, hooks)
- Rust, Java, C++, Perl language rules
- Flutter/Dart rules
Infrastructure
- Selective install with
--with/--withoutCLI flags - Agent description compression with lazy loading
- Skill inspection logic for recurring failure pattern detection
- Governance event capture hooks
- MCP health-check hook with auto-reconnect
- SQLite state store for session/skill/decision tracking
- Session adapters for canonical snapshots
- Codex sync merges AGENTS.md instead of replacing
Bug Fixes
- Windows CI fully green (all 38 matrix jobs passing)
- SessionStart ANSI escape code sanitization
- Observer memory explosion with throttling
- Flaky observer bash test on Windows skipped
- Catalog count validation fixed
- Plugin root auto-detection fallback
ECC Tools App
- Stripe billing live (Pro $19/seat, Enterprise contact)
- GitHub OAuth checkout flow
- Analyzer quality improvements (7 greptile findings fixed)
- Duplicate PR prevention with idempotency
- Auto-analysis skip list for managed repos
- Push cooldown increased to 7 days
AgentShield (v1.4.0)
- False positive fix: deny rules and block hooks no longer flagged as threats
- CVE database with 25+ known MCP vulnerabilities
- MCP tool description poisoning detection (5 new rules)
- Continuous scanning with config drift detection (--watch mode)
- Runtime monitoring daemon for tool calls
- Supply chain verification for MCP npm packages
- PR security gate with baseline comparison
- Organization-wide security policy enforcement
- CLAUDE.md filesystem permission check
- 1,609 tests passing
Stats
- 219 commits since v1.8.0
- 30+ contributors
- 88K+ GitHub stars
- 1,540+ tests passing across all platforms
Install / Upgrade
npx claudepluginhub affaan-m/everything-claude-code --plugin everything-claude-code
Or install manually in Claude Code.
- /harness-audit, /loop-start, /quality-gate, /model-route commands
- NanoClaw v2 with model routing and skill hot-load
Full changelog
ECC v1.8.0: Harness Performance Release
v1.8.0 shifts ECC from "config bundle" to a practical agent harness performance system: more reliable hooks, stronger eval/quality controls, and tighter parity across Claude Code, Cursor, OpenCode, and Codex (macOS app + CLI).
https://github.com/user-attachments/assets/18f05e41-a49b-4126-9771-3df1e07cd7b7
What’s New
- New harness commands
/harness-audit/loop-start/loop-status/quality-gate/model-route
- NanoClaw v2 upgrades
- Model routing
- Skill hot-load
- Session branch/search/export/compact/metrics
- New harness skills and operators
agent-harness-constructionagentic-engineeringralphinho-rfc-pipelineai-first-engineeringenterprise-agent-opsnanoclaw-replcontinuous-agent-loop
- New agents
harness-optimizerloop-operator
Reliability and Hook Fixes
- Fixed SessionStart root resolution (robust fallback when plugin root env is missing).
- Fixed empty/partial session summary behavior by moving summary persistence to the Stop lifecycle path where transcript payload exists.
- Added explicit hook controls:
ECC_HOOK_PROFILE=minimal|standard|strictECC_DISABLED_HOOKS=comma,separated,ids
- Replaced fragile inline one-liner hook commands with dedicated scripts for safer cross-platform behavior.
- Improved Windows path handling for doc-warning/whitelist logic.
- Hardened observer behavior for non-interactive environments to reduce hang risk.
Cross-Harness Parity
- Claude Code, Cursor, OpenCode, and Codex now share tighter behavior around hooks, commands, and skill execution semantics.
- OpenCode command mirrors added for the new harness command set.
- Codex config/docs alignment improved for both app and CLI workflows.
Compatibility Notes
autonomous-loopsis retained for compatibility in this release.continuous-agent-loopis now the canonical skill name.
Upgrade Path
- Pull latest and reinstall/update ECC.
- Run
/harness-auditto baseline reliability and risk. - Use
/quality-gate . --stricton active repos. - If needed, tune hooks with
ECC_HOOK_PROFILEandECC_DISABLED_HOOKS.
Credits
- frontend / marketing slides skill inspired by @zarazhangrui
- continuous learning skill - homunculus-inspired by @humanplane
- slop guards inspired by @alexfazio
Supporting Docs
- Release notes source:
docs/releases/1.8.0/release-notes.md - Launch assets:
docs/releases/1.8.0/
- Sanitized external links and added security guides to reduce injection risks
- Added a frontend-slides skill for zero-dependency HTML presentations and PPTX conversion
- Introduced generic business and investor content skills for article writing, market research, and fundraising
- Implemented a chief-of-staff communication triage agent for workflow coordination
- Resolved hook permission conflicts that could expose Codex integration.
- Added Codex compatibility through a new configuration command.
- Introduced seven AI-powered skills for repo analysis and automation.
- Integrated 102 AgentShield security rules across all protection layers.
Weekly OSS security release digest.
The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.
No spam, unsubscribe anytime.