Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
git clone --depth 1 https://github.com/nguyenthienthanh/aura-frogWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/commands/nguyenthienthanh/aura-frog/trace)<a href="https://agentmods.dev/commands/nguyenthienthanh/aura-frog/trace"><img src="https://agentmods.dev/badge/commands/nguyenthienthanh/aura-frog/trace/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/commands/nguyenthienthanh/aura-frog/trace"><img src="https://agentmods.dev/badge/commands/nguyenthienthanh/aura-frog/trace.svg" alt="Reviewed on agentmods" width="80" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00000 | $0.01187 |
| Opus 5.5 | $0.00000 | $0.00475 |
| Sonnet 5.5 | $0.00000 | $0.00237 |
| Haiku 4.5 | $0.00000 | $0.00119 |
Grade A, and why
trace scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 1mo ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 70 lines — stays where its author put it; the contents beside it link to each section on GitHub.
/aura-frog:trace
Render the reasoning trace for a task — file_reads, output_claims, tool_calls, decisions. Surfaces hallucinations (claims with grounded: false).
Usage
/aura-frog:trace <TASK_ID> # full trace, table format
/aura-frog:trace <TASK_ID> --filter file_read # one event type only
/aura-frog:trace <TASK_ID> --hallucinations # only output_claim events with grounded:false
/aura-frog:trace <TASK_ID> --tail 50 # last N events
/aura-frog:trace <TASK_ID> --since 2026-04-29T12:00:00Z
/aura-frog:trace --active # use the active.task from .claude/plans/active.json
Protocol
-
Resolve TASK_ID. If
--active, read.claude/plans/active.json→active.task. Refuse if no active task. -
Locate the trace file. Since v3.7.3 the trace is co-located with the task, so resolve the task folder first and only then fall back to the legacy flat path — the same order
resolveTracePaths()inhooks/tool-call-tracer.cjsuses, which is what both writers (tool-call-tracer.cjsandtdd-red-failure-tracker.cjs) follow:- Find the task folder: the directory under
.claude/plans/features/*/stories/*/tasks/whosetask.mdfrontmatter hasid: {TASK_ID}. If found → read{taskFolder}/trace.jsonl. - Otherwise → read the legacy
.claude/plans/traces/{TASK_ID}.jsonl. - If neither exists → exit with message "no trace yet for {TASK_ID}".
Read only the first location that exists; do not merge the two. A legacy file alongside a task folder is a pre-v3.7.3 leftover, and reporting it as the live trace would show a stale event stream.
- Find the task folder: the directory under
-
Parse each line as JSON. Filter by
--filterand--sinceflags. -
Render table (columns: ts, event_id, type, summary). For long payloads (>80 chars), truncate with
…. -
Halluciation summary: count of
output_claimwithgrounded:false. If > 0 in non---hallucinationsmode, print:⚠️ N potential hallucinations — re-run with --hallucinations to see them. -
Storage warning: if trace file > 10 MB or > 1000 events → suggest
/aura-frog:plan-archive(Milestone C).
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 1mo ago First seen · 70 lines · 0 tokens per session scan A 5b86385c2892
trace is a command published in the GitHub repository nguyenthienthanh/aura-frog (25 stars, last pushed 6d ago), licensed MIT. It costs nothing until one of its globs matches a file; then it loads 1,187 tokens. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other commands, from other repositories
logic-health
Sweep a whole codebase or directory for logic correctness — use before a release or to identify risk hotspots.
improve
/improve Scan and fix all improvement categories /improve arch Architectural improvements only /improve duplication Duplicate code / abstraction consolidation /improve quality Code quality (GuardLoop patterns GL-01 through GL-10) /improve security Security posture improvements /improve --dry-run Show what would be…
validate
Run SDLC compliance check against the current project. Validates build system, code quality, testing, CI/CD, security, documentation, VCS, and release configurations.
cleanup
Detect and remove orphaned code, unused components, dead routes, and stale database artifacts.
tdd-bug
Fix a bug with regression test first.
sweep
Codebase hygiene sweep — /refactor --quick alias, or --tests for test pruning analysis.