ECC Review

8.8/10

Turn repo history into reviewable agent skills, checks, and install defaults.

Review updated May 2026 By The AI Way Editorial 3 min read
ECC CLI Tool Open Source Repo Awareness Security Freemium from USD 19.00/mo

Our Verdict

ECC is worth the trouble when your problem is not code generation itself, but repeated repo setup, missing guardrails, and agent sessions that forget how the codebase works. The pull-request review loop is the real selling point. If you mainly want faster completions, it is too much system for the job.

Official site
A free plan is listed; verify current limits before upgrading. Starts at USD 19.00.
open_in_new Try ECC
Official Website Snapshot Visit Site ↗

check_circle Pros

  • The GitHub App keeps automation reviewable instead of hiding changes in local setup.
  • The OSS layer makes cross-harness installs easier to keep aligned.
  • AgentShield treats config and MCP risk as a first-class review target.

cancel Cons

  • The value only shows up once repo standards and review flow already matter.
  • Private repos and recurring audits start on the paid tier.
  • The install surface can feel sprawling for small teams.

Should you use it?

teams turning repo habits into reviewable agent skills, checks, and install defaults

Skip it if: you mostly want better completions inside one editor and do not need shared repo policy

Is it worth the price?

Freemium Starts at USD 19.00

Free is enough to test the public-repo workflow and keep the OSS install local. You start paying when private repos, recurring audits, or pooled team usage become real requirements.

The Free Tier

Free covers public repos, 10 analyses monthly, and 200 commits per run.

Paid Upgrade
$19/seat/month

Pro adds private repos, PR audits, pooled seats, and deeper AgentShield checks.

One thing to know before you start

Judge ECC by one real pull request from one repo. If that PR removes future setup repetition, the product is doing its job.

What people actually use it for

Standardize repo memory

Use ECC when one repository keeps forcing new developers or new agent sessions to relearn the same rules, commands, and review habits from scratch.

Carry one harness policy

It fits mixed teams where Codex, Cursor, Claude Code, and OpenCode all touch the same repo but need one shared install and guardrail story.

Catch risky config drift

AgentShield matters when copied configs, hooks, or MCP settings start broadening risk faster than normal code review catches it.

What does ECC actually do?

Most AI coding tools sell speed at the point of generation. ECC goes after a different failure point: every fresh session forgets the repo, the review habits, and the local guardrails that one engineer set up weeks ago. Its GitHub App loop matters because it turns that hidden setup into a pull request the team can actually read.

The split between OSS and paid layers is also easy to reason about. OSS handles local profiles and portability across coding harnesses. Paid starts to matter when the repo is private and the team wants recurring audits, pooled seats, and stronger policy surfaces.

What you can do with it

Analyze a repo and open a pull request with proposed skills.
Install shared profiles for Claude Code, Codex, Cursor, and OpenCode.
Scan hooks, MCP servers, and agent configs with AgentShield.
Run recurring private-repo audits through the GitHub App.
Choose core, developer, security, or full install profiles.

Technical details

license
Core OSS repo is MIT licensed
repo_loop
GitHub App turns repo history into reviewable pull requests
free_limit
Free covers public repos, 10 analyses monthly, 200 commits per run
security_scan
AgentShield scans configs, hooks, and MCP surfaces
harness_support
Works across Claude Code, Codex, Cursor, and OpenCode

Top Alternatives to ECC

If ECC is close but still misses the job, try one of these instead.

Key Questions

What does ECC create after analysis?
It opens a pull request with proposed skills, defaults, and checks derived from repo history.
Can you use ECC without the GitHub App?
Yes. The OSS install works locally first, then the GitHub App adds private-repo automation and recurring review.
When does free stop being enough?
Free stops being enough when work moves into private repos or 10 public-repo analyses no longer cover real use.