Getting it into your agent
This one installs as part of its plugin. Adding the marketplace and installing the plugin brings it with everything else the plugin ships.
/plugin marketplace add Aimeerrhythm/enterprise-change-workflow/plugin install ecwWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/commands/aimeerrhythm/enterprise-change-workflow/ecw-validate-config)<a href="https://agentmods.dev/commands/aimeerrhythm/enterprise-change-workflow/ecw-validate-config"><img src="https://agentmods.dev/badge/commands/aimeerrhythm/enterprise-change-workflow/ecw-validate-config.svg" alt="Measured on agentmods" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00029 | $0.02015 |
| Opus 5 | $0.00015 | $0.01007 |
| Sonnet 5 | $0.00006 | $0.00403 |
| Haiku 4.5 | $0.00003 | $0.00201 |
Grade B, and why
ecw-validate-config scanned grade B with 1 finding against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 8d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Reads agent configuration directoriesmediumAgent snooping
.claude/, .codex/, .gemini/ hold keys, settings and other credentials a mod has no legitimate need for.
cat .claude/ecw/ecw.yml How it starts
The opening of the file, as written. The whole thing — 252 lines — stays where its author put it; the contents beside it link to each section on GitHub.
ECW Configuration Validation
You are executing the /ecw-validate-config command. Your task is to check the project's ECW configuration completeness and correctness, then output a structured report. Follow the steps below strictly in order.
Step 1: Locate Configuration
Check if .claude/ecw/ directory exists. If not, report:
ECW not initialized. Please run /ecw-init first to initialize project configuration.
Then stop.
If the directory exists, read ecw.yml:
cat .claude/ecw/ecw.yml
Parse the paths section to get all configuration paths. If the paths section is missing, fall back to defaults.
Step 2: Check ecw.yml
Read .claude/ecw/ecw.yml and check:
2a: Unfilled Placeholders
Search for unreplaced template placeholders:
project.namestill set to"Your Project Name"- Values containing
{...}patterns component_typesstill commented out (only defaultServiceentry)
2b: Language Consistency
project.languageshould match files in project root (pom.xml / build.gradle → java)scan_patternsvalues should be appropriate for the declared language
2c: Path Validity
For each path in the paths section, check whether the referenced file/directory exists:
domain_registrypath_mappingsknowledge_rootknowledge_shared
Step 3: Check domain-registry.md
Read the domain registry file (path from ecw.yml or default .claude/ecw/routing/domain-registry.md).
3a: Empty Check
If the file contains no domain blocks (only template header), flag:
- "Domain registry is empty — no business domains registered"
3b: Per-Domain Validation
For each registered domain, extract:
- Domain ID
- Knowledge root path
- Entry document path
- Code root path
Check:
- Does knowledge root exist? —
ls {knowledge_root}/ 2>/dev/null - Does entry document exist? — Check if file at specified path exists
- Does code root exist? —
ls {code_root}/ 2>/dev/null - Any remaining placeholders? —
{{...}}or{your_...}patterns
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 8d ago First seen · 252 lines · 29 tokens per session scan B b66b4f1f7b1f
ecw-validate-config is a command published in the GitHub repository Aimeerrhythm/enterprise-change-workflow (1 stars, last pushed 3mo ago), licensed MIT. It adds 29 tokens to every session and 2,015 once invoked, about $0.0001 per session on Opus 5. A static security scan graded it B with 1 finding (reads agent configuration directories). No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.
Other commands, from other repositories
check
Verify an implementation against the CCF spec — conformance, coding conventions, SOLID/OOP, and BE↔FE cross-check. Read-only review.
discover
Run a full product discovery cycle — from outcome definition through opportunity mapping, prioritisation, and experiment design. Use when the team isn't sure what to build next, or before writing a PRD for a complex feature space.
simplify
The over-engineering review: five tags (delete, stdlib, native, yagni, shrink), a mandatory replacement per finding, and a real null result when there is nothing to cut.
git
The pre-finish status: branch, hygiene findings, message checks, workflow lint, template state.
init
Install the formatters this repository needs, with every command visible before it runs.
sonarqube
Analyze SonarCloud quality issues for a specific PR.