External/ECC
1
0
Fork 0
mirror of https://github.com/affaan-m/ECC.git synced 2026-09-08 07:37:48 +02:00
Code Issues Packages Projects Releases Wiki Activity

fix(install): harden universal setup release path (#2888)

Browse Source 
* fix(install): harden universal setup release path

* docs(adal): use ecc-universal doctor command
This commit is contained in:
haelyra
2026-08-30 18:54:00 -04:00
committed by GitHub
parent ce64e417fd
commit 005eff40fd
28 changed files with 1252 additions and 98 deletions
Download Patch File Download Diff File Expand all files Collapse all files
.codex/AGENTS.md
+5 -5
View File
@@ -87,17 +87,17 @@ Sample role configs in this repo:
| Feature | Claude Code | Codex CLI |
|---------|------------|-----------|
| Hooks | 8+ event types | Not yet supported |
| Hooks | 8+ event types | Reviewed native subset with explicit trust in `/hooks` |
| Context file | CLAUDE.md + AGENTS.md | AGENTS.md only |
| Skills | Skills loaded via plugin | `.agents/skills/` directory |
| Skills | Skills loaded via plugin | Native plugin skills and repo `.agents/skills/` |
| Commands | `/slash` commands | Instruction-based |
| Agents | Subagent Task tool | Multi-agent via `/agent` and `[agents.<name>]` roles |
| Security | Hook-based enforcement | Instruction + sandbox |
| Security | Hook profiles + sandbox | Trusted hook subset + instruction + sandbox |
| MCP | Full support | Supported via `config.toml` and `codex mcp add` |
## Security Without Hooks
## Security with Narrower Hooks
Since Codex lacks hooks, security enforcement is instruction-based:
Codex supports a narrower native hook subset than Claude Code, with explicit trust in `/hooks`. Treat those reviewed hooks as one layer alongside instructions and the sandbox:
1. Always validate inputs at system boundaries
2. Never hardcode secrets — use environment variables
3. Run `npm audit` / `pip audit` before committing