Install
$ agentstack add skill-kevinzai-commander-ccc-ecc ✓ scanned · ✓ verified, works with Claude Code, Cursor, and more.
Security review
✓ PassedNo issues found. Passed automated security review. · v0.1.0 How review works →
- ✓ Prompt-injection patterns
- ✓ Secret / credential exfiltration
- ✓ Dangerous shell & filesystem operations
- ✓ Untrusted network calls
- ✓ Known-malicious package signatures
What it can access
- ✓ Network access No
- ✓ Filesystem access No
- ✓ Shell / process execution No
- ✓ Environment & secrets No
- ✓ Dynamic code execution No
From automated source analysis of v0.1.0. “Used” means the capability is present in the source — more access means more to trust, not that it’s unsafe.
Verified badge
Passed review? Show it. Paste this badge into your README, it links to the public security report.
Reliability & compatibility
Declared compatibility
Compatibility is declared by the source manifest. End-to-end runtime verification is coming, see below.
We're building live execution health for every listing: tool-call success rate, median latency, uptime, and last-checked timestamps, measured, not self-reported. It isn't live yet, so we don't show numbers we can't stand behind.
How agent discovery & health will work →About
/ccc-ecc — Selective ECC Loader
Load one specific Everything Claude Code (ECC) component into ~/.claude/ without copying the whole ECC harness.
ECC source lives at vendor/everything-claude-code/. This is a click-first picker: choose a skill, agent, or hook; then symlink or copy only that component.
Safety model
- Prefer symlink so updates follow the pinned ECC vendor checkout.
- Offer copy for an editable local snapshot.
- Back up before replacing anything under
~/.claude/. - Never install ECC settings, commands, or the full harness.
Steps
1. Locate ECC
git rev-parse --show-toplevel
test -d vendor/everything-claude-code && echo ok || echo missing
If missing, stop with:
> ECC vendor checkout not found at vendor/everything-claude-code/. Run /ccc-upgrade or initialize submodules first.
2. Ask what to do
question: "What ECC component do you want to load?"
header: "ECC"
multiSelect: false
options:
- label: "Load a skill"
- label: "Load an agent"
- label: "Load a hook"
- label: "List available ECC components"
3. Inventory candidates
ECC="vendor/everything-claude-code"
find "$ECC" \( -path '*/node_modules/*' -o -path '*/.git/*' -o -path '*/dist/*' -o -path '*/build/*' \) -prune -o \
\( -path '*/skills/*/SKILL.md' -o -path '*/agents/*.md' -o -path '*/hooks/*.js' -o -path '*/hooks/*.sh' \) -print
Classify skills//SKILL.md as skills, agents/*.md as agents, and hooks/*.{js,sh} as hooks. If the user chose "List available", render grouped markdown tables and stop.
4. Ask which component
question: "Pick one ECC to load."
header: "Pick"
options:
- label: ""
description: ""
If there are too many options for a picker, show a numbered table and ask for the exact name or relative path.
5. Ask symlink or copy
question: "Install this ECC component as a symlink or a copy?"
header: "Mode"
options:
- label: "Symlink (recommended)"
- label: "Copy"
- label: "Cancel"
6. Map destination
- Skill
skills//SKILL.md→~/.claude/skills//SKILL.md - Agent
.md→~/.claude/agents/.md - Hook
.js|sh→~/.claude/hooks/.js|sh
mkdir -p "$DEST_DIR"
If the destination exists, ask: "Keep existing" or "Replace with backup". On backup, move the existing target to .backup-YYYYMMDD-HHMMSS before installing.
7. Install + verify
# Symlink mode
ln -s "$ABS_SOURCE" "$DEST"
# Copy mode
cp -R "$ABS_SOURCE" "$DEST"
# Verify
test -e "$DEST" && ls -l "$DEST"
Report the source, destination, mode, and whether a backup was made.
Anti-patterns — DO NOT
- Do not copy the full ECC harness, command tree, or settings into
~/.claude/. - Do not overwrite existing local skills, agents, or hooks without a backup and confirmation.
- Do not edit files under
vendor/everything-claude-code/. - Do not install unknown binary files or dependency folders.
- Do not add ECC hooks to settings automatically; install the file and tell the user where it landed.
> ⚙️ Fable contract: plan before build · verifier ≠ worker · prove before alarm · loops need gates · leave durable state — rules/fable-method.md
Source & license
This open-source skill is cataloged on AgentStack and links to its original source — we do not rehost the code.
- Author: KevinZai
- Source: KevinZai/commander
- License: MIT
- Homepage: https://commanderplugin.com
Install and usage instructions live in the source repository linked above.
Reviews
No reviews yet, be the first.
Write a review
Versions
- v0.1.0 Imported from the upstream source.