Skip to content
Back to skills

Ecc Tools Cost Audit

ASecurity

Audit cost overrun cho ECC Tools GitHub App — investigate runaway PR creation, quota bypass, premium-model leakage, duplicate jobs, billing spikes.

  • 10 stars
  • 0 votes
  • 0 copies
  • 1 view
  • Added September 9, 2026
ai-agentsbashgitapisecurity

Works with

  • api

Security analysis

A100/100

Scanned September 9, 2026

npx -y skills add yanacuti1121/Yana-AI --skill ecc-tools-cost-audit --agent claude-code

Installs into .claude/skills of the current project.

Are you the author of Ecc Tools Cost Audit?

Add the live security badge to your README. It updates with every re-scan.

Security grade badge for Ecc Tools Cost Audit
[![Security: A — Skills Directory](https://www.skillsdirectory.com/api/skills/yanacuti1121-ecc-tools-cost-audit/badge)](https://www.skillsdirectory.com/skills/yanacuti1121-ecc-tools-cost-audit)

More formats (shields.io, HTML) on the badges page. Keep it an A: scan every change in CI with Pro.

Download with Pro
SKILL.md
---
name: ecc-tools-cost-audit
description: "Audit cost overrun cho ECC Tools GitHub App — investigate runaway PR creation, quota bypass, premium-model leakage, duplicate jobs, billing spikes."
origin: ECC
user-invocable: true
---

# ECC Tools Cost Audit

Evidence-first workflow để investigate cost overruns trong ECC Tools GitHub App.

## Khi nào dùng

- ECC Tools đang tạo quá nhiều PRs
- Chi phí API bất ngờ tăng cao
- Nghi ngờ quota bypass hoặc premium model leakage
- Duplicate jobs chạy nhiều lần
- GitHub App billing spikes

## Workflow

### Bước 1 — Freeze scope

```bash
# Switch sang ECC-Tools repo
# Identify entry points: webhook router, queue producer/consumer, PR creation, billing path
```

### Bước 2 — Trace ingress

```
Map tất cả enqueue paths TRƯỚC khi theorize.
Inspect: webhook handlers → queue producers → downstream consumers
```

### Bước 3 — Trace worker

```
Xác nhận mỗi queued analysis produce gì:
- PR creation?
- Branch creation?
- Token spending?
```

### Bước 4 — Audit burn paths

| Pattern | Check |
|---------|-------|
| PR multiplication | 1 webhook → N PRs? |
| Quota bypass | Post-enqueue usage reservation? |
| Premium leakage | Free-tier jobs đang route qua premium models? |
| Retry burn | Retry logic chạy vòng lặp? |
| Duplicate jobs | App-generated branches re-entering webhooks? |

### Bước 5 — Fix theo priority

1. PR multiplication (fix trước)
2. Quota bypass
3. Premium model leakage
4. Duplicate jobs
5. Rerun safety

### Bước 6 — Verify hẹp

```bash
# Chỉ rerun tests trên changed path
# Không test toàn bộ suite
```

## 5 failure modes cao nhất

1. Single queue type xử lý tất cả triggers
2. Post-enqueue usage reservation → quota bypass
3. Free-tier jobs route qua premium providers
4. App-generated branches re-enter webhooks (loop)
5. Expensive work complete trước khi persistence safety check

## Related skills

- `autonomous-loops` — loop detection
- `customer-billing-ops` — billing investigation
- `security-review` — security audit
- `verification-loop` — narrow verification

## Source

https://github.com/affaan-m/ECC · ECC Tools: https://github.com/marketplace/ecc-tools

Attribution

Is this your skill, or is something wrong with this listing? Request removal or report an issue. Author removals are honored within 72 hours.

Comments

Loading comments…

Newsletter

Get the weekly list of safe new skills, and the ones we pulled.