ECC Studio
scan agent harness files for leaked secrets, pipe-to-shell i
ECC Studio! — scan agent harness files for leaked secrets, pipe-to-shell installs and unsafe paths, plus a skill planner
How to use ECC Studio
- Paste agent.yaml, SKILL.md or hook script text into the scanner
- Press Run safety scan to check secrets, downloads, paths and URLs
- Review each finding with its severity, line and snippet
- Try the risky and clean samples to see the scanner fire and stay quiet
- Open the harness planner for the include/exclude skill curation rules
Features
- Detects eight hardcoded secret shapes, from AWS keys to JWTs
- Flags pipe-to-shell and fetch-and-run install patterns
- Catches absolute per-user home paths in harness files
- Checks every URL against the host allowlist with placeholder exemptions
- Curated include/exclude planner for safe agent harness skills
Frequently asked questions
Is it free?
Yes, unlimited.
Login to use this free online tool. Create a free account to get started.
