Workspace Surface Audit
Read-only audit skill for answering the question "what can this workspace and machine actually do right now, and what should we add or enable next?"
This is the ECC-native answer to setup-audit plugins. It does not modify files unless the user explicitly asks for follow-up implementation.
When to Use
- User says "set up Claude Code", "recommend automations", "what plugins or MCPs should I use?", or "what am I missing?"
- Auditing a machine or repo before installing more skills, hooks, or connectors
- Comparing official marketplace plugins against ECC-native coverage
- Reviewing
.env, .mcp.json, plugin settings, or connected-app surfaces to find missing workflow layers
- Deciding whether a capability should be a skill, hook, agent, MCP, or external connector
Non-Negotiable Rules
- Never print secret values. Surface only provider names, capability names, file paths, and whether a key or config exists.
- Prefer ECC-native workflows over generic "install another plugin" advice when ECC can reasonably own the surface.
- Treat external plugins as benchmarks and inspiration, not authoritative product boundaries.
- Separate three things clearly:
- already available now
- available but not wrapped well in ECC
- not available and would require a new integration
Audit Inputs
Inspect only the files and settings needed to answer the question well:
- Repo surface
package.json, lockfiles, language markers, framework config, README.md
.mcp.json, .lsp.json, .claude/settings*.json, .codex/*
AGENTS.md, CLAUDE.md, install manifests, hook configs
- Environment surface
.env* files in the active repo and obvious adjacent ECC workspaces
- Surface only key names such as
STRIPE_API_KEY, TWILIO_AUTH_TOKEN, FAL_KEY
- Connected tool surface
- Installed plugins, enabled connectors, MCP servers, LSPs, and app integrations
- ECC surface
- Existing skills, commands, hooks, agents, and install modules that already cover the need
Audit Process
Phase 1: Inventory What Exists
Produce a compact inventory:
- active harness targets
- installed plugins and connected apps
- configured MCP servers
- configured LSP servers
- env-backed services implied by key names
- existing ECC skills already relevant to the workspace
If a surface exists only as a primitive, call that out. Example:
- "Stripe is available via connected app, but ECC lacks a billing-operator skill"
- "Google Drive is connected, but there is no ECC-native Google Workspace operator workflow"
Phase 2: Benchmark Against Official and Installed Surfaces
Compare the workspace against:
- official Claude plugins that overlap with setup, review, docs, design, or workflow quality
- locally installed plugins in Claude or Codex
- the user's currently connected app surfaces
Do not just list names. For each comparison, answer:
- what they actually do
- whether ECC already has parity
- whether ECC only has primitives
- whether ECC is missing the workflow entirely
Phase 3: Turn Gaps Into ECC Decisions
For every real gap, recommend the correct ECC-native shape:
| Gap Type |
Preferred ECC Shape |
| Repeatable operator workflow |
Skill |
| Automatic enforcement or side-effect |
Hook |
| Specialized delegated role |
Agent |
| External tool bridge |
MCP server or connector |
| Install/bootstrap guidance |
Setup or audit skill |
Default to user-facing skills that orchestrate existing tools when the need is operational rather than infrastructural.
Output Format
Return five sections in this order:
- Current surface
- what is already usable right now
- Parity
- where ECC already matches or exceeds the benchmark
- Primitive-only gaps
- tools exist, but ECC lacks a clean operator skill
- Missing integrations
- capability not available yet
- Top 3-5 next moves
- concrete ECC-native additions, ordered by impact
Recommendation Rules
- Recommend at most 1-2 highest-value ideas per category.
- Favor skills with obvious user intent and business value:
- setup audit
- billing/customer ops
- issue/program ops
- Google Workspace ops
- deployment/ops control
- If a connector is company-specific, recommend it only when it is genuinely available or clearly useful to the user's workflow.
- If ECC already has a strong primitive, propose a wrapper skill instead of inventing a brand-new subsystem.
Good Outcomes
- The user can immediately see what is connected, what is missing, and what ECC should own next.
- Recommendations are specific enough to implement in the repo without another discovery pass.
- The final answer is organized around workflows, not API brands.
Source: affaan-m/ECC → skills/workspace-surface-audit/SKILL.md
Also appears in: hashgraph-online/awesome-codex-plugins/plugins/Colin4k1024/tsp/skills/workspace-surface-audit/SKILL.md
1---2name: workspace-surface-audit3description: Audit the active repo, MCP servers, plugins, connectors, env surfaces, and harness setup, then recommend the highest-value ECC-native skills, hooks, agents, and operator workflows. Use when the user wants help setting up Claude Code or understanding what capabilities are actually available in their environment.4---5# Workspace Surface Audit67Read-only audit skill for answering the question "what can this workspace and machine actually do right now, and what should we add or enable next?"89This is the ECC-native answer to setup-audit plugins. It does not modify files unless the user explicitly asks for follow-up implementation.1011## When to Use1213- User says "set up Claude Code", "recommend automations", "what plugins or MCPs should I use?", or "what am I missing?"14- Auditing a machine or repo before installing more skills, hooks, or connectors15- Comparing official marketplace plugins against ECC-native coverage16- Reviewing `.env`, `.mcp.json`, plugin settings, or connected-app surfaces to find missing workflow layers17- Deciding whether a capability should be a skill, hook, agent, MCP, or external connector1819## Non-Negotiable Rules2021- Never print secret values. Surface only provider names, capability names, file paths, and whether a key or config exists.22- Prefer ECC-native workflows over generic "install another plugin" advice when ECC can reasonably own the surface.23- Treat external plugins as benchmarks and inspiration, not authoritative product boundaries.24- Separate three things clearly:25 - already available now26 - available but not wrapped well in ECC27 - not available and would require a new integration2829## Audit Inputs3031Inspect only the files and settings needed to answer the question well:32331. Repo surface34 - `package.json`, lockfiles, language markers, framework config, `README.md`35 - `.mcp.json`, `.lsp.json`, `.claude/settings*.json`, `.codex/*`36 - `AGENTS.md`, `CLAUDE.md`, install manifests, hook configs372. Environment surface38 - `.env*` files in the active repo and obvious adjacent ECC workspaces39 - Surface only key names such as `STRIPE_API_KEY`, `TWILIO_AUTH_TOKEN`, `FAL_KEY`403. Connected tool surface41 - Installed plugins, enabled connectors, MCP servers, LSPs, and app integrations424. ECC surface43 - Existing skills, commands, hooks, agents, and install modules that already cover the need4445## Audit Process4647### Phase 1: Inventory What Exists4849Produce a compact inventory:5051- active harness targets52- installed plugins and connected apps53- configured MCP servers54- configured LSP servers55- env-backed services implied by key names56- existing ECC skills already relevant to the workspace5758If a surface exists only as a primitive, call that out. Example:5960- "Stripe is available via connected app, but ECC lacks a billing-operator skill"61- "Google Drive is connected, but there is no ECC-native Google Workspace operator workflow"6263### Phase 2: Benchmark Against Official and Installed Surfaces6465Compare the workspace against:6667- official Claude plugins that overlap with setup, review, docs, design, or workflow quality68- locally installed plugins in Claude or Codex69- the user's currently connected app surfaces7071Do not just list names. For each comparison, answer:72731. what they actually do742. whether ECC already has parity753. whether ECC only has primitives764. whether ECC is missing the workflow entirely7778### Phase 3: Turn Gaps Into ECC Decisions7980For every real gap, recommend the correct ECC-native shape:8182| Gap Type | Preferred ECC Shape |83|----------|---------------------|84| Repeatable operator workflow | Skill |85| Automatic enforcement or side-effect | Hook |86| Specialized delegated role | Agent |87| External tool bridge | MCP server or connector |88| Install/bootstrap guidance | Setup or audit skill |8990Default to user-facing skills that orchestrate existing tools when the need is operational rather than infrastructural.9192## Output Format9394Return five sections in this order:95961. **Current surface**97 - what is already usable right now982. **Parity**99 - where ECC already matches or exceeds the benchmark1003. **Primitive-only gaps**101 - tools exist, but ECC lacks a clean operator skill1024. **Missing integrations**103 - capability not available yet1045. **Top 3-5 next moves**105 - concrete ECC-native additions, ordered by impact106107## Recommendation Rules108109- Recommend at most 1-2 highest-value ideas per category.110- Favor skills with obvious user intent and business value:111 - setup audit112 - billing/customer ops113 - issue/program ops114 - Google Workspace ops115 - deployment/ops control116- If a connector is company-specific, recommend it only when it is genuinely available or clearly useful to the user's workflow.117- If ECC already has a strong primitive, propose a wrapper skill instead of inventing a brand-new subsystem.118119## Good Outcomes120121- The user can immediately see what is connected, what is missing, and what ECC should own next.122- Recommendations are specific enough to implement in the repo without another discovery pass.123- The final answer is organized around workflows, not API brands.124125---126127**Source:** [`affaan-m/ECC`](https://github.com/affaan-m/ECC) → `skills/workspace-surface-audit/SKILL.md`128129**Also appears in:** `hashgraph-online/awesome-codex-plugins/plugins/Colin4k1024/tsp/skills/workspace-surface-audit/SKILL.md`