Agent skill

Workspace Surface Audit

by affaan-m in affaan-m/ECC

审计活跃仓库、MCP服务器、插件、连接器、环境表面和工具设置,然后推荐最高价值的ECC原生技能、钩子、代理和操作员工作流。当用户希望帮助设置Claude Code或了解其环境中实际可用的功能时使用。

MITAuto-check: notesAgent Workflows

Install Workspace Surface Audit

skills CLI
$ npx skills add affaan-m/ECC --skill workspace-surface-audit -a claude-code

Project install by default; add -g for ~/.claude/skills/.

GitHub CLI
$ gh skill install affaan-m/ECC workspace-surface-audit --agent claude-code

Project scope by default; add --scope user for a personal install. Needs GitHub CLI 2.90.0 or later (public preview).

Manual copy
$ git clone --depth 1 https://github.com/affaan-m/ECC.git skills-src && mkdir -p .claude/skills && cp -r skills-src/docs/zh-CN/skills/workspace-surface-audit .claude/skills/workspace-surface-audit && rm -rf skills-src

Use ~/.claude/skills/ instead of .claude/skills for a personal install. The folder must contain SKILL.md.

Claude Code skills documentation · loads skills from .claude/skills/

Facts

Skill name
workspace-surface-audit
GitHub stars
276k
Token cost
~558 tokens
SKILL.md length
180 words
Files
1
Skills in repo
683
Repo updated
First seen
Licence
MIT

At a glance

审计活跃仓库、MCP服务器、插件、连接器、环境表面和工具设置,然后推荐最高价值的ECC原生技能、钩子、代理和操作员工作流。当用户希望帮助设置Claude Code或了解其环境中实际可用的功能时使用。

  • Works in 4 steps: 仓库表面 → 环境表面 → 连接工具表面 → …
  • Agent Workflows work in your project
  • SKILL.md covers 何时使用, 不可协商的规则, 审计输入 and 审计流程, plus 3 more sections
  • Needs STRIPE_API_KEY and TWILIO_AUTH_TOKEN

What it does

Workspace Surface Audit is an agent skill from affaan-m/ECC. 审计活跃仓库、MCP服务器、插件、连接器、环境表面和工具设置,然后推荐最高价值的ECC原生技能、钩子、代理和操作员工作流。当用户希望帮助设置Claude Code或了解其环境中实际可用的功能时使用。

Its SKILL.md is about 560 tokens, which your agent loads only when the skill is triggered. It is a single SKILL.md file with no bundled scripts.

It sits in Agent Workflows. It works with Model Context Protocol. The repository describes itself as: The agent harness performance optimization system. Skills, instincts, memory, security, and research-first development for Claude Code, Codex, Opencode, Cursor and beyond. The licence is MIT.

When your agent uses it

  • Agent Workflows work in your project

Example prompts

  • “/workspace-surface-audit”

Requirements

  • A credential in STRIPE_API_KEY
  • A credential in TWILIO_AUTH_TOKEN

Workflow steps

4 steps, taken from the first numbered list in SKILL.md.

  1. 仓库表面
  2. 环境表面
  3. 连接工具表面
  4. ECC 表面

What it can do on your machine

Read from SKILL.md and the folder at commit 4eb71d9. It shows what the files ask for, not the result of running them.

  • Tool permissions

    Pre-approves nothing: there is no allowed-tools line, so your agent's usual permission prompts apply.

    From allowed-tools in the SKILL.md frontmatter.

  • Runs code

    No scripts in the folder and no shell commands in SKILL.md.

    From the folder's file list and the shell code blocks in SKILL.md.

  • Network

    No URLs in SKILL.md.

    From URLs in SKILL.md, links to its own repository left out.

  • Credentials

    Names these keys or tokens, usually read from environment variables:

    • STRIPE_API_KEY
    • TWILIO_AUTH_TOKEN
    • FAL_KEY

    From names ending in _API_KEY, _TOKEN, _SECRET, _KEY or _PASSWORD in SKILL.md.

Context cost

Workspace Surface Audit loads about 558 tokens when it runs. Until then it costs about 31 tokens; SKILL.md has 180 words of instructions outside code blocks.

Always · name and description, kept in context so the agent knows when to use it
~31
When it runs · the whole SKILL.md, loaded when a task matches
~558

Estimates: characters ÷ 4, the usual rule of thumb; real counts depend on the model's tokenizer. Scripts and assets cost tokens only if the agent reads them.

Safety

Auto-check: notes

The automated check noted patterns worth knowing about, such as sudo or a known installer.

  • NoteMentions a .env fileSKILL.md:18
    * 审查 `.env`、`.mcp.json`、插件设置或连接的应用表面,以发现缺失的工作流层
  • NoteMentions a .env fileSKILL.md:40
    * 活动仓库及明显相邻的 ECC 工作区中的 `.env*` 文件

Automated static check — not a guarantee. Review scripts before installing. It scans the text of SKILL.md for risky patterns (piping downloads into a shell, reading credential files, hidden Unicode, destructive commands); files beside SKILL.md are not scanned.

SKILL.md

The full file from affaan-m/ECC at commit 4eb71d9, republished under its MIT licence (© affaan-m). 180 words, ~558 tokens.

Download SKILL.mdSave it as .claude/skills/workspace-surface-audit/SKILL.md (or your agent's skills folder).
name
workspace-surface-audit
description
审计活跃仓库、MCP服务器、插件、连接器、环境表面和工具设置,然后推荐最高价值的ECC原生技能、钩子、代理和操作员工作流。当用户希望帮助设置Claude Code或了解其环境中实际可用的功能时使用。
origin
ECC

工作区表面审计

只读审计技能,用于回答"这个工作区和机器当前实际上能做什么,以及我们下一步应该添加或启用什么?"

这是 ECC 原生对设置审计插件的回答。除非用户明确要求后续实现,否则不会修改文件。

何时使用

  • 用户说"设置 Claude Code"、"推荐自动化"、"我应该使用什么插件或 MCP?"或"我缺少什么?"
  • 在安装更多技能、钩子或连接器之前审计机器或仓库
  • 比较官方市场插件与 ECC 原生覆盖范围
  • 审查 .env、.mcp.json、插件设置或连接的应用表面,以发现缺失的工作流层
  • 决定某项能力应该是技能、钩子、代理、MCP 还是外部连接器

不可协商的规则

  • 绝不打印秘密值。仅显示提供商名称、能力名称、文件路径以及密钥或配置是否存在。
  • 当 ECC 能够合理拥有该表面时,优先选择 ECC 原生工作流,而非通用的"安装另一个插件"建议。
  • 将外部插件视为基准和灵感,而非权威的产品边界。
  • 清晰区分三件事:
    • 当前已可用的
    • 可用但 ECC 封装不佳的
    • 不可用且需要新集成的

审计输入

仅检查回答该问题所需的文件和设置:

  1. 仓库表面
    • package.json、锁定文件、语言标记、框架配置、README.md
    • .mcp.json、.lsp.json、.claude/settings*.json、.codex/*
    • AGENTS.md、CLAUDE.md、安装清单、钩子配置
  2. 环境表面
    • 活动仓库及明显相邻的 ECC 工作区中的 .env* 文件
    • 仅显示密钥名称,如 STRIPE_API_KEY、TWILIO_AUTH_TOKEN、FAL_KEY
  3. 连接工具表面
    • 已安装的插件、已启用的连接器、MCP 服务器、LSP 和应用集成
  4. ECC 表面
    • 已覆盖需求的现有技能、命令、钩子、代理和安装模块

审计流程

阶段 1:盘点现有内容

生成简洁的清单:

  • 活动的工具链目标
  • 已安装的插件和连接的应用
  • 已配置的 MCP 服务器
  • 已配置的 LSP 服务器
  • 由密钥名称暗示的基于环境的服务
  • 与工作区相关的现有 ECC 技能

如果某个表面仅以原始形式存在,请指出。例如:

  • "Stripe 可通过连接的应用使用,但 ECC 缺少计费操作技能"
  • "Google Drive 已连接,但 ECC 没有原生的 Google Workspace 操作工作流"
阶段 2:与官方和已安装表面进行基准比较

将工作区与以下内容进行比较:

  • 与设置、审查、文档、设计或工作流质量重叠的官方 Claude 插件
  • Claude 或 Codex 中本地安装的插件
  • 用户当前连接的应用表面

不要仅列出名称。对于每个比较,回答:

  1. 它们实际做什么
  2. ECC 是否已具备同等能力
  3. ECC 是否仅有原始形式
  4. ECC 是否完全缺失该工作流
阶段 3:将差距转化为 ECC 决策

对于每个实际差距,推荐正确的 ECC 原生形态:

差距类型首选 ECC 形态
可重复的操作工作流技能
自动执行或副作用钩子
专门的委派角色代理
外部工具桥接MCP 服务器或连接器
安装/引导指南设置或审计技能

当需求是操作性的而非基础设施性的时,默认使用面向用户的技能来编排现有工具。

输出格式

按此顺序返回五个部分:

  1. 当前表面
    • 当前已可用的内容
  2. 同等能力
    • ECC 已匹配或超越基准的地方
  3. 仅有原始形式的差距
    • 工具存在,但 ECC 缺少简洁的操作技能
  4. 缺失的集成
    • 尚不可用的能力
  5. 前 3-5 个下一步行动
    • 具体的 ECC 原生新增内容,按影响排序

推荐规则

  • 每个类别最多推荐 1-2 个最高价值的想法。
  • 优先选择具有明显用户意图和商业价值的技能:
    • 设置审计
    • 计费/客户运营
    • 问题/项目运营
    • Google Workspace 运营
    • 部署/运营控制
  • 如果连接器是公司特定的,仅在其确实可用或对用户工作流明显有用时才推荐。
  • 如果 ECC 已有强大的原始形式,建议封装技能而非发明全新的子系统。

良好结果

  • 用户可以立即看到已连接的内容、缺失的内容以及 ECC 下一步应拥有的内容。
  • 推荐足够具体,无需再次发现即可在仓库中实现。
  • 最终答案围绕工作流而非 API 品牌组织。

© affaan-m, MIT. Rendered from Markdown: HTML in the file is shown as text, images as links, and headings moved down two levels. Raw file

Files

Just SKILL.md in docs/zh-CN/skills/workspace-surface-audit of affaan-m/ECC.

Open the folder on GitHubat commit 4eb71d9

Compare with similar skills

Workspace Surface Audit next to the 5 skills that share the most tags, products or categories with it. Stars are the repository's; “used in” counts other GitHub owners with a copy.

Workspace Surface Audit compared with similar skills
SkillStarsUsed inTokensAuto-checkLicenceRepo updated
Workspace Surface Audit this skillaffaan-m/ECC276k—~558Automated safety check: NotesMIT
MCP Server Builderanthropics/skills180k63 repos~2.3kAutomated safety check: PassApache-2.0
MCP Server BuildershareAI-lab/learn-claude-code78k4 repos~1.2kAutomated safety check: PassMIT
MCP Integration for Pluginsanthropics/claude-plugins-official38k11 repos~3.1kAutomated safety check: PassApache-2.0
MemPalace Memory SearchMemPalace/mempalace60k—~1.4kAutomated safety check: PassMIT
Crush Configurationcharmbracelet/crush29k—~3.7kAutomated safety check: PassCustom licence

Similar skills

  • MCP Server Builder

    anthropics/skills

    Official

    Guides the design and implementation of Model Context Protocol servers in TypeScript or Python, from tool naming and error messages to evaluation.

    180k GitHub starsUsed in 63 repos~2.3k tokens
    Agent WorkflowsAuto-check passed
  • MCP Server Builder

    shareAI-lab/learn-claude-code

    Walks through building MCP servers in Python or TypeScript that expose tools, resources and prompts to Claude, with templates, registration and testing.

    78k GitHub starsUsed in 4 repos~1.2k tokens
    Agent WorkflowsAuto-check passed
  • MCP Integration for Plugins

    anthropics/claude-plugins-official

    Official

    Explains how to bundle Model Context Protocol servers in a Claude Code plugin, covering config files, stdio, SSE, HTTP and WebSocket server types, and authentication.

    38k GitHub starsUsed in 11 repos~3.1k tokens
    Agent WorkflowsAuto-check passed
  • MemPalace Memory Search

    MemPalace/mempalace

    Mines project files and conversation exports into a local, searchable memory palace and recalls past work by semantic search through the mempalace CLI.

    60k GitHub stars~1.4k tokensUpdated today
    Agent WorkflowsAuto-check passed
  • Crush Configuration

    charmbracelet/crush

    Explains how to configure the Crush coding agent with crushrc or crush.json, covering providers, models, LSPs, MCP servers, hooks, permissions and config precedence.

    29k GitHub stars~3.7k tokensUpdated today
    Agent WorkflowsAuto-check passed
  • Context Mode Output Sandbox

    mksglu/context-mode

    Routes large command, file, API and browser output through context-mode tools so only the needed result enters the agent's context, instead of dumping it via Bash.

    26k GitHub stars~4.1k tokensUpdated today
    Agent WorkflowsAuto-check passed

More from affaan-m/ECC

All 682 skills in this repo
  • Skill Stocktake

    affaan-m/ECC

    Audits your installed Claude skills and commands for quality, with a quick mode for recently changed skills and a full mode that evaluates all of them through subagents.

    277k GitHub starsUsed in 5 repos~3.1k tokens
    Auto-check passed
  • Ingests, indexes, searches, edits and monitors video, audio and live streams through the VideoDB Python SDK, returning stream links, clips and timestamps.

    277k GitHub starsUsed in 3 repos~3.5k tokens
    Auto-check: notes
  • Docs Governance

    affaan-m/ECC

    Route broad documentation-governance requests to existing ECC skills and run an opt-in, read-only audit of mapped documentation roles, links, ADR indexes, and evidence references.

    277k GitHub stars~1.1k tokensUpdated today
    Auto-check passed
  • Rules Distillation

    affaan-m/ECC

    Scans installed skills for principles that recur across them and proposes rule-file changes: append, revise, add a section, create a file or leave as covered.

    277k GitHub starsUsed in 2 repos~2.3k tokens
    Auto-check passed
  • Builds DRAFT counterparty agreements from one markdown template and a small JSON spec per party, with clauses picked by the party's role.

    277k GitHub stars~2.9k tokensUpdated today
    Auto-check passed
  • Set an ECC-specific frontend design direction for production UI work.

    277k GitHub starsUsed in 1 repo~2.2k tokens
    Auto-check passed

Categories

Questions about Workspace Surface Audit

What does Workspace Surface Audit do?

审计活跃仓库、MCP服务器、插件、连接器、环境表面和工具设置,然后推荐最高价值的ECC原生技能、钩子、代理和操作员工作流。当用户希望帮助设置Claude Code或了解其环境中实际可用的功能时使用。. Workspace Surface Audit is an agent skill from affaan-m/ECC.

When should I use Workspace Surface Audit?

Workspace Surface Audit fits situations like: agent Workflows work in your project.

How do I install Workspace Surface Audit in Claude Code?

Run `npx skills add affaan-m/ECC --skill workspace-surface-audit -a claude-code`. Or copy the skill folder (docs/zh-CN/skills/workspace-surface-audit in affaan-m/ECC) into .claude/skills/workspace-surface-audit in your project. Claude Code loads it when a task matches its description.

How do I install Workspace Surface Audit in Codex?

Run `npx skills add affaan-m/ECC --skill workspace-surface-audit -a codex`. Or copy the skill folder (docs/zh-CN/skills/workspace-surface-audit in affaan-m/ECC) into .agents/skills/workspace-surface-audit in your project. Codex loads it when a task matches its description.

Can I use Workspace Surface Audit in Cursor, Gemini CLI or GitHub Copilot?

Cursor, Gemini CLI, GitHub Copilot and OpenCode also load SKILL.md folders. With the skills CLI, run `npx skills add affaan-m/ECC --skill workspace-surface-audit -a cursor` (or -a gemini-cli, github-copilot or opencode for the others). To copy it by hand, put the folder in .cursor/skills/workspace-surface-audit, .gemini/skills/workspace-surface-audit, .github/skills/workspace-surface-audit and .opencode/skills/workspace-surface-audit in your project.

What does Workspace Surface Audit need to run?

Going by SKILL.md and its folder, Workspace Surface Audit needs credentials named STRIPE_API_KEY, TWILIO_AUTH_TOKEN and FAL_KEY. Our summary lists: A credential in STRIPE_API_KEY; A credential in TWILIO_AUTH_TOKEN.

Does Workspace Surface Audit access the network?

SKILL.md contains no URLs. Any network use would come from the scripts or tools the agent runs. This is read from the text; nothing was executed.

Is Workspace Surface Audit safe to install?

Our automated static check of SKILL.md found notes only (mentions a .env file), nothing it rates as a warning. It is not a guarantee. Review the folder before installing.

What licence does Workspace Surface Audit use?

Workspace Surface Audit is published under the MIT licence (the repository's licence). It allows redistribution, so the full SKILL.md is shown on this page.

How many tokens does Workspace Surface Audit use?

About 558 tokens (SKILL.md is roughly 2.2k characters). Agents keep only the skill's name and description in context until a task matches; then they load SKILL.md in full.

What are the alternatives to Workspace Surface Audit?

Skills that share tags, products or a category with Workspace Surface Audit: MCP Server Builder (anthropics/skills, 180k stars), MCP Server Builder (shareAI-lab/learn-claude-code, 78k stars), MCP Integration for Plugins (anthropics/claude-plugins-official, 38k stars) and MemPalace Memory Search (MemPalace/mempalace, 60k stars). The comparison table on this page puts their stars, adoption, token cost, safety result and licence side by side.

Who maintains Workspace Surface Audit?

affaan-m (a GitHub user) maintains it in affaan-m/ECC, which has 276,111 GitHub stars. The repository holds 683 skills in this directory. The repository was last updated on October 10, 2026.

Source: affaan-m/ECC on GitHub. Facts on this page come from the repository at the commit we read; the author's words are quoted as theirs.