Should You Install Everything Claude Code, the All-in-One Kit Gone Viral?
TL;DR
ECC, Everything Claude Code, bundles 67 agents, 281 skills, 94 commands, and a homegrown security scanner, AgentShield, for Claude Code, Cursor, Codex CLI, and other agents. MIT license, 238,000 stars in seven months since it launched in January 2026. The posts that made it known cite numbers that are already old (30 agents, 64 skills): the repository has nearly doubled since. One thing to know before installing: the core is free, a paid tier exists for private repositories.
What it actually is
ECC installs a full system around Claude Code: specialized agents (planning, code review, build repair, security, architecture), skills by domain (TDD, research, frontend, data, ML, ops), and commands that act as direct shortcuts. The whole thing installs in one command and also syncs with Codex, with partial support for Cursor, Gemini, Zed, and GitHub Copilot.
npx ecc-universal install
The idea behind the project: instead of rebuilding a plan → test → implement → review → verify → remember cycle on every prompt, you install it once and it becomes the agent's default way of working.
Why the circulating numbers are already outdated
The post that made ECC known cites 27 to 30 agents, 64 skills, and 33 commands. At the time of verification, the README shows 67 agents, 281 skills, and 94 legacy compatibility commands. The repository, created on January 18, 2026, has doubled its content in a few months: a lead maintainer who ships weekly across seven different agent environments, plus dozens of outside contributors.
A number cited in a post stays true for the day it was written. For a project growing at this pace, the only reliable source is the repository itself, not the screenshot that keeps circulating for months afterward.
The real draw of the project: AgentShield
The most distinctive component of the project isn't the agent count, it's AgentShield: a security scanner that audits the agent's own configuration, not the code it produces. 1,282 tests, 102 rules, checking prompts, hooks, MCP configuration, permissions, and agent files for exposed secrets or dangerous settings.
npx -y ecc-agentshield scan --path .
It's a direct answer to a real, under-discussed risk: a misconfigured agent, or a third-party skill installed without review, becomes an attack surface just like a compromised npm dependency.
What to know before installing
The core of the project stays open source under the MIT license, free with no stated limit. A paid service, ECC Pro, exists alongside it: a hosted GitHub app starting at $19 per user per month for use on private repositories. The project is sponsored by CodeRabbit, Greptile, Atlas Cloud, Itô Markets, and Moonshot AI, the company behind the Kimi model.
Nothing deceptive in that setup, the disclosure is clear in the repository. It's worth repeating anyway, because none of the posts sharing the project mention it.
Should you install everything at once
The README itself advises against stacking multiple installation methods on the same agent, which risks duplicating skills, commands, and hooks. With 281 skills available, selective installation makes more sense than a full install for a given project: that's less configuration surface to understand before it earns its keep.
How to try it
npx ecc-universal install
For a low-commitment first test, a security scan alone on an existing project gives a concrete sense of what AgentShield catches, before installing the rest.