traceway-setup

A setup and verification workflow for Traceway observability, which records how an application behaves in production, using Traceway or OpenTelemetry. It examines backend, browser, full-stack, mobile, and AI-agent projects before proposing how they should be tracked.

In plain words
What is it for?
Use it to inspect an application, propose a Traceway project map, create the approved structure, add monitoring, and verify that data is being reported.
Why use it?
It helps map each production component to the right monitoring project and separates short-lived setup credentials from long-lived data-ingest credentials. It also requires agreement on the project structure before applying changes.

Skill for Claude CodeCodex

Install

Getting it into your agent

One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.

agentmods
npx agentmods add skills/tracewayapp/traceway/traceway-setup
Any agent
npx skills add tracewayapp/traceway --skill traceway-setup
Clone the repo
git clone --depth 1 https://github.com/tracewayapp/traceway

Made for: Claude Code, Codex.

Per session 134 Skills are progressive disclosure: only the name and description are preloaded; the body loads when the skill is used.
When invoked 15,708 The whole file, excluding the scripts and references it only reads on demand.
Security scan A 1 finding. Scan, not verified.
Origin original No closer match found in the catalogue.
Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

ModelPer sessionOnce invoked
Fable 5 $0.00134 $0.15708
Opus 5 $0.00067 $0.07854
Sonnet 5 $0.00027 $0.03142
Haiku 4.5 $0.00013 $0.01571

Measured 2d ago against content hash 1cd677920aae, method: parsed. Prices are Anthropic first-party input rates as of 2026-08-30, from the pricing page.

Security

Grade A, and why

traceway-setup scanned grade A with 1 finding against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 2d ago.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Makes network callslowCapability

Not a fault in itself. Listed so you know the mod talks to something, and to what.

The default path: submit the confirmed map as a setup plan, the user approves it visually on the Traceway website, and a short curl script writes the resulting ingest tokens into env files. Nothing needs to be installed
skills/traceway-setup/SKILL.md · 723 lines

How it starts

The opening of the file, as written. The whole thing — 723 lines — stays where its author put it; the contents beside it link to each section on GitHub.

Set Up Traceway

Analyze the application first, agree on its Traceway project structure with the user, help them create that structure in the dashboard, and only then integrate and verify it.

Operating Contract

  • Inspect before asking for credentials or changing code.
  • Explain what was detected, what is already tracked, and how each production component should report to Traceway.
  • Present a proposed project map and wait for the user to confirm it before implementation.
  • There are two classes of credentials, treated differently:
    • Setup tokens (prefix tws_) are org-scoped, expire in 6 hours, and can only propose a setup plan; nothing is created until the user approves the plan on the Traceway website. They are designed to transit chat, and asking the user to paste one is expected.
    • Project ingest tokens and upload tokens are long-lived. Never print their values, never ask the user to paste them into chat, and never commit them. When Step 3's apply script (or the traceway CLI) writes an approved plan's ingest tokens into env files, read only the variable names and statuses from its output, never the values.
  • Never print token values found in files or the environment. Report only that a value exists and the variable name that carries it.
  • Never commit tokens or filled connection strings.

Invocation Forms

Invocation carries Path
A project ingest token + url Fast Path for a single component, otherwise Steps 1-2, then integrate against the existing project
A setup token (tws_) + url Steps 1-2, then Step 3 from "Write the plan file" (3b)
No token Steps 1-2, then Step 3 from the top

Every backend integrates with OpenTelemetry. There is one backend path, not one per language or web framework: Go, Node, Python, PHP, Java, .NET, Ruby, and everything else export OTLP/HTTP to <instance>/api/otel/*. The Traceway project is created with framework OpenTelemetry, which is the only backend option in the dashboard's framework picker. The native Traceway Go SDK is a deliberate exception used only when the user explicitly asks for it.

Read the full file on GitHub · 723 lines

Files

What ships with it

8 files beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. 2d ago First seen · 723 lines · 134 tokens per session scan A 1cd677920aae

Subscribe to this mod's changes

traceway-setup is a skill published in the GitHub repository tracewayapp/traceway (1,446 stars, last pushed today), licensed MIT. It adds 134 tokens to every session and 15,708 once invoked, about $0.0007 per session on Opus 5. A static security scan graded it A with 1 finding (makes network calls). No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.

Related

Other skills, from other repositories

opentelemetry-docs

OpenTelemetry — vendor-neutral observability: traces, metrics, logs, OTLP, Collector, SDKs, semantic conventions.

pledgeandgrow/pledge-skills · 32 tokens

netdata-otel-setup

Use when enabling the Netdata otel.plugin, writing /etc/netdata/otel.yaml, defining metric-to-chart mappings, configuring TLS on the OTLP receiver, or debugging OTLP ingestion issues with Netdata. Covers OTLP gRPC ingestion for metrics (v2.7.0+) and logs (v2.9.0+). Traces are not yet supported.

netdata/skills · 84 tokens

greptimedb-development-docker-image

Builds a development-only GreptimeDB Docker image from a local debug binary for local-cluster testing, and optionally pushes it to a development registry. Use when the user asks to package, build, tag, publish, or cross-build a non-release GreptimeDB or GreptimeDB Enterprise image for debugging.

GreptimeTeam/greptimedb · 71 tokens

greptimedb-fuzz-ci-failure-investigation

Investigate a failed GreptimeDB fuzz CI target link by downloading GitHub Actions job logs plus fuzz artifacts such as kind logs, monitor dumps, and CSV dumps, then correlate the failure with local GreptimeDB source code. Use when the user provides a failed fuzz CI target/job URL or asks to diagnose GreptimeDB fuzz CI…

GreptimeTeam/greptimedb · 80 tokens

greptimedb-release-note

Generate a GreptimeDB release changelog with git cliff (correct range, subtract already-released patch PRs, rebuild contributors, add human-curated highlights), output to a file, and prepare the docs-repo blog PR. Use when asked to write/generate a GreptimeDB release note or changelog.

GreptimeTeam/greptimedb · 70 tokens

greptimedb-release

Runbook for publishing a new GreptimeDB version (tag + GitHub release + docs release-note PR) on the upstream GreptimeTeam/greptimedb repo. Use when asked to "release" / "publish" a GreptimeDB version (e.g. v1.1.0, v1.0.3).

GreptimeTeam/greptimedb · 75 tokens