by FankChen
Local-first AI agent trace workbench. Inspect Claude Code, Codex and OTLP logs, compare runs, and export privacy-conscious reports. No backend or API keys.
# Add to your Claude Code skills
git clone https://github.com/FankChen/tracecrateLast scanned: 9/12/2026
{
"issues": [],
"status": "PASSED",
"scannedAt": "2026-09-12T08:24:08.328Z",
"npmAuditRan": true,
"pipAuditRan": true,
"promptInjectionRan": true
}See how tracecrate compares with popular alternatives.
tracecrate is an open-source ai agents skill for AI coding assistants such as Claude Code, Codex CLI, and ChatGPT, built by FankChen. Local-first AI agent trace workbench. Inspect Claude Code, Codex and OTLP logs, compare runs, and export privacy-conscious reports. No backend or API keys. It has 308 GitHub stars.
Yes. tracecrate passed SkillsLLM's automated security scan — a dependency vulnerability audit plus prompt-injection heuristics — with no high-severity issues. You can read the full report in the Security Report section on this page.
Clone the repository with "git clone https://github.com/FankChen/tracecrate" and add it to your Claude Code skills directory (see the Installation section above).
tracecrate is primarily written in TypeScript. It is open-source under FankChen on GitHub, so you can review or fork the full source.
Yes. SkillsLLM lists many other AI Agents skills you can browse and compare side by side. Open the AI Agents category from the badge at the top of this page, or use the Related Skills and comparison links further down to weigh tracecrate against similar tools.
No comments yet. Be the first to share your thoughts!
⚠️ Third-Party Software Notice
This skill is third-party open-source software developed and hosted independently on GitHub. SkillsLLM is an informational directory and does not control or maintain the underlying repository.
Any security checks, ratings, or warnings displayed by SkillsLLM are automated and limited in scope. They do not constitute a security certification or guarantee that the software is safe, error-free, or free from malicious code, vulnerabilities, compromised dependencies, or prompt-injection risks.
Review the source code, permissions, dependencies, and configuration before installing or running any third-party skill. Use is at your own risk. To the maximum extent permitted by applicable law, SkillsLLM is not liable for losses arising from third-party software.
A privacy-first, client-side AI trace workbench. Inspect the sequence, question the patterns, share deliberately.
简体中文 · V0.2 research & design · Format guide · Privacy · Contributing

Actual V0.2 live-site screenshot from Pages 34747767675, visually reviewed; 1440 × 2104 full page. All events and values are synthetic demo data, not benchmark results.
TraceCrate turns files you choose into a searchable timeline, recorded metrics, heuristic diagnostics, and side-by-side comparisons. No backend, no telemetry, no accounts, no API keys. It reads traces; it does not run agents or execute recorded commands.
Open the live demo · v0.2.0 release & downloads · Contribute · Source on GitHub. Explore synthetic runs without installing anything, or run locally below.
Open the hosted demo and follow the walkthrough below. Local use requires Node.js ≥22.12 (24 recommended) and npm:
git clone https://github.com/FankChen/tracecrate.git
cd tracecrate
npm ci
npm run dev
For local use, open the address printed by Vite. Installation time is separate from the 30-second walkthrough:
No Claude/Codex installation or agent commands are necessary. For your own data, use Choose files or drop a supported file. Claude session files are private: explicitly select only files you are authorized to inspect; TraceCrate never scans agent directories. Never contribute actual histories as fixtures.
See the design decisions and official references, V0.2 release notes and keyboard walkthrough.
| Format | Supported input | Important boundary |
|---|---|---|
| Claude Code | Normal message JSONL; text, tool calls/results, selected system/result records | Partial streaming deltas ignored; private transcript variants can differ |
| Codex | Rollout JSONL with session_meta, turn_context, response_item, selected event_msg |
Not arbitrary codex exec --json events; reasoning/deltas not imported |
| OTLP JSON | resourceSpans → scopeSpans → spans, nested structured attributes, current/legacy cache-write keys |
No protobuf, collector endpoint, full OTLP, or MCP transcript support |
| TraceCrate native | One validated schemaVersion: 1 JSON report |
Bounded schema; unknown fields stripped; JSON exports are sharing transforms, not raw backups |
See formats, synthetic examples, and public upstream references. Usage.input includes cacheRead and cacheWrite; those are subcounts, not additions. Total reported tokens = input + output.
Limits: 20 MiB UTF-8 per file, 20,000 input records and normalized events, nesting depth 60; up to 5 files per selection and 10 sessions in memory (including demos). Imports have a 30-second per-file deadline; background timer throttling can delay enforcement. Web Workers required; whole-file parsing, not streaming. Sequence alignment permits 2,000 selected events per side, 400 edits and a 200 ms budget, with explicit failure rather than partial output. Analysis, comparison and exports still use the UI thread. Detail/preview rendering is capped at 50,000 characters, not the full download. See architecture.
The app has no trace-upload or telemetry path. That does not make every environment or export safe. Browser extensions, a compromised browser/device, and modified hosted code can read data. A static host still receives ordinary request metadata, such as IP address and user agent.
Structure-only removes arbitrary free text, original identifiers/names, inputs, outputs, and model names using a strict allowlist. Token usage and timing remain by default and can now be omitted; event order, counts, remapped relationships and statuses still remain and can be sensitive. Pattern redaction preserves text and can miss secrets. Neither mode guarantees anonymization; inspect every field of the full download. Clearing memory is not secure erasure. Read privacy and export details and security reporting.
npm run check runs lint, unit tests, browser-test typechecking and the production build. npm run test:e2e invokes Playwright; browser binaries must be installed separately. npm run package:release packages an already-tested build with licenses and SHA-256 checksums. See contribution checks.
V0.2 released · 2026-09-13: v0.2.0 targets dc5d92daabe84378d994f09637db317f36b21024. Its release validation job passed 225 unit tests and all 64 browser tests, lint, application/browser TypeScript, build, coverage and dependency audit. Core/adapters line coverage is 97.51% (not UI coverage). Publication was recovered from an HTTP 500 using the unchanged validated artifact; the overall workflow remains marked failed, not passed. Both public downloads were independently verified against SHA-256 and the original artifact. Pages 34747767675 separately verified the hosted app at a95b96c1459b7454f88e5efb4d76af780ed1c661, with the same application assets: offline import, filters/comparison, exports and zero runtime network/console errors. See full provenance and recovery details.
Historical first release · 2026-09-10: v0.1.0 was created at 52d9ae9b73f815c264a3eb39f5fc3eedc5cb9715; its 107 unit / 36 browser tests and 96.58% core/adapters line coverage are historical, not substituted for V0.2 checks.
Verification limits: Chromium desktop and Pixel 7 emulation run in GitHub Actions; local browser downloads remain blocked. This is not physical-device, Firefox/WebKit or screen-reader certification. Launch posts and the interaction video are not published. See verification history.