Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add thoughtbot/rails-consultant --skill tracegit clone --depth 1 https://github.com/thoughtbot/rails-consultantWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/thoughtbot/rails-consultant/trace)<a href="https://agentmods.dev/skills/thoughtbot/rails-consultant/trace"><img src="https://agentmods.dev/badge/skills/thoughtbot/rails-consultant/trace/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/thoughtbot/rails-consultant/trace"><img src="https://agentmods.dev/badge/skills/thoughtbot/rails-consultant/trace.svg" alt="Reviewed on agentmods" width="80" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00011 | $0.01905 |
| Opus 5.5 | $0.00004 | $0.00762 |
| Sonnet 5.5 | $0.00002 | $0.00381 |
| Haiku 4.5 | $0.00001 | $0.00191 |
Grade A, and why
trace scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured yesterday.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 159 lines — stays where its author put it; the contents beside it link to each section on GitHub.
Trace
Reading code tells you what should happen. Running it tells you what does: the callback nobody mentioned, the job that enqueues two more, the email that goes out twice. That's the gap this fills. The output is a record, in order, of what one scenario did when it ran, with every step marked as seen or only read.
Two ways this fails. You read the code, write it up in the past tense, and it looks exactly like a run — so the reader trusts a guess as much as an observation. Or you run a step that can't be undone: a process gets killed, a database gets dropped. The first is worse, because nothing about it looks wrong.
1. Pin the scenario
The scenario is $ARGUMENTS, or ask for one. It arrives as a sentence ("user creates
an account"), a route, a command, a job name.
Turn it into three things before running anything:
- Entry point. The route and handler, CLI command, or job that starts it — found in the code, not assumed. Two plausible ones (sign up by form, sign up by invite)? Take the common one, say which, and name the other as its own trace.
- Starting state. Who is acting and what exists already. "A signed-in user who owns one project with one app." Give every association the scenario reads or deletes at least one row. A delete run against a record with no children can't show you the child table it forgets to clean up.
- Input. The real params:
email: "[email protected]", not "valid params".
Don't ask the user for these. Find them; say what you picked in one line.
2. Set up a development run
Run it in the development environment: the app's real configuration, the one a developer sees. The test environment swaps things out — jobs run inline, mail and broadcasts go to fakes, outside calls are stubbed by the test setup — so a trace there records the test harness as much as the app. Development is made for this: its data is disposable and its outside calls go to sandbox accounts.
Read references/running.md now. It has the recording taps and the setup details.
What ships with it
2 files beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- yesterday First seen · 159 lines · 11 tokens per session scan A b164aa71e8d1
trace is a skill published in the GitHub repository thoughtbot/rails-consultant (29 stars, last pushed yesterday), licensed MIT. It adds 11 tokens to every session and 1,905 once invoked, about $0.0000 per session on Opus 5.5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-11-07.
trace compared with skills from other repositories
| Mod | Type | Stars | Last push | Licence | Scan | Tokens | Works with |
|---|---|---|---|---|---|---|---|
| tracethoughtbot/rails-consultant | Skill | 29 | yesterday | MIT | A | 11 | Claude Code |
| auditoliver-kriska/claude-elixir-phoenix | Skill | 573 | 2d ago | MIT | A | 35 | Claude Code |
| investigateoliver-kriska/claude-elixir-phoenix | Skill | 573 | 2d ago | MIT | A | 51 | Claude Code |
| narrow-bare-rescueoliver-kriska/claude-elixir-phoenix | Skill | 573 | 2d ago | MIT | A | 40 | Claude Code |
| tidewave-integrationoliver-kriska/claude-elixir-phoenix | Skill | 573 | 2d ago | MIT | A | 38 | Claude Code |
| verifyoliver-kriska/claude-elixir-phoenix | Skill | 573 | 2d ago | MIT | A | 33 | Claude Code |
| phx-investigateoliver-kriska/claude-elixir-phoenix | Skill | 573 | 2d ago | MIT | A | 35 | Claude Code, Codex |