Everything Claude Code skills: what affaan-m/ECC ships

Everything Claude Code is the open-source kit by Affaan Mustafa, first published on GitHub as affaan-m/everything-claude-code and now renamed affaan-m/ECC. It bundles 311 skills with agents, commands, hooks and rules, and its most-installed skill is security-review, a skill from affaan-m/ECC with 18,189 installs (skills.sh registry, 2026-10-15). This guide shows what the kit contains and how to take only the parts you need.

Key takeaways

• The repo has 285,365 GitHub stars and 42,323 forks under an MIT license, and the old everything-claude-code URL now returns a 301 redirect to affaan-m/ECC (GitHub API, 2026-10-15).
• The README lists 71 agents, 311 skills and 97 legacy command shims. The GitHub tree confirms 311 SKILL.md files under skills/ (GitHub, 2026-10-15).
• The top 5 skills by installs are security-review (18,189), golang-patterns (15,530), backend-patterns (15,123), frontend-patterns (14,935) and coding-standards (14,797) (skills.sh registry, 2026-10-15).
• You can install 1 skill with the skills CLI, or the full kit as the ecc@ecc Claude Code plugin. The README says to pick one method per agent and never stack them.
• The catalog skill named everything-claude-code (7,002 installs) teaches the repo's own commit and module conventions. It does not install the kit.

What is Everything Claude Code?

Everything Claude Code (ECC) is a set of skills, agents, hooks and rules that gives Claude Code a fixed engineering process. The README sums up that process as "plan -> test -> implement -> review -> verify -> remember -> improve". The repo was created on 2026-01-18 by the GitHub user affaan-m and last received a push on 2026-10-12 (GitHub API, 2026-10-15).

The README splits the kit into 6 parts:

• Agents (71): subagents for planning, review, build repair, security, architecture and domain work.
• Skills (311): TDD, research, security, docs, frontend, data, ML and operations.
• Commands (97): entry points kept "while ECC moves to a skills-first surface".
• Hooks and memory: session summaries, continuous learning and context controls.
• Rules: always-loaded standards you choose per language. The rules/ folder holds 22 packs, including common.
• AgentShield: a scanner for prompts, hooks, MCP config, permissions and secrets.

The README states that ECC works best with Claude Code and that other harnesses get capability-limited adapters.

How many skills does Everything Claude Code ship?

ECC ships 311 skills in its skills/ folder, and that matches the README count (GitHub, 2026-10-15). The repo holds 1,062 SKILL.md files in total, but most of the extra files are translated docs and copies for other harnesses, so 311 is the real number.

Each skill is a separate folder. That is why the skills.sh registry tracks them one by one: the Skillselion catalog files them across more than 15 categories, from Security and Testing & QA to Python and Rust.

Which Everything Claude Code skills are most installed?

The most-installed ECC skill is security-review, with 18,189 installs (skills.sh registry, 2026-10-15). Its published SKILL.md activates when you add authentication, handle user input, work with secrets, create API endpoints or build payment features. It then walks a 10-item checklist, from secrets management and input validation to CSRF protection, rate limiting and dependency security.

The next 4 are language and stack pattern skills:

• golang-patterns (15,530 installs): idiomatic Go, with sections on error handling, concurrency, interface design and package layout. See the golang-patterns skill listing.
• backend-patterns (15,123): API, database, caching and background-job patterns for Node.js, Express and Next.js API routes.
• frontend-patterns (14,935): React and Next.js components, state, data fetching, forms and accessibility.
• coding-standards (14,797): the "shared floor" for naming and readability. Its SKILL.md points to frontend-patterns and backend-patterns for framework details.

How do you install one ECC skill instead of the whole kit?

Use the skills CLI with the --skill flag. For example, npx skills add https://github.com/affaan-m/ECC --skill security-review adds only that skill. The README also documents a source-checkout path for a short list, ./install.sh --target claude --skills tdd-workflow,security-review, and a consult command that suggests components for a task.

This is the right choice when you want 2 or 3 skills. The guide to installing a Claude skill covers the folder layout Claude Code reads.

How do you install the whole Everything Claude Code kit?

Run the guided setup, npx ecc-universal@2.2.3 setup, or add the plugin inside Claude Code with /plugin marketplace add https://github.com/affaan-m/ECC and then /plugin install ecc@ecc. The README says the guided setup needs Node.js 18 or newer, plus Git and Claude Code 2.1 or newer for the plugin step.

The plugin does not copy rules. The README tells you to copy rules/common and one language pack into ~/.claude/rules/ecc/ yourself. After the install, the configure-ecc skill (10,512 installs) changes scope and hook profile from inside Claude Code.

A complete starter stack

1. security-review (18,189 installs) for any change that touches auth, input or secrets.
2. coding-standards (14,797) as the baseline for naming and readability.
3. The pattern skill for your stack: golang-patterns (15,530), backend-patterns (15,123) or frontend-patterns (14,935).
4. tdd-workflow (12,313) if you want tests written before the code.

The best skills for AI agents page and the AI agents category list alternatives from other repos.

Common pitfalls

• Stacking install methods. The README warns that a second install into the same harness can duplicate skills, commands and hooks. Pick the plugin, the guided setup or single skills.
• Installing the skill named everything-claude-code. The everything-claude-code skill listing describes a repo-specific conventions skill generated on 2026-03-20. It is useful only to developers who contribute to ECC.
• Using a mirror. The README names the official sources: the affaan-m/ECC repo, the ecc-universal npm package, the ecc@ecc plugin and ecc.tools. It warns that unofficial re-uploads "may contain malware".
• Copying every rule pack. Rules load on every session, so 22 packs cost context. Start with common plus 1 language.

Start with security-review and one pattern skill, then add the full kit only if you want its hooks and agents too. The best security skills for Claude Code compares security-review with other options.

Common questions