
Research
/Security News
737 Chrome VPN Extensions Linked to Brand Impersonation and Browser Traffic Redirection
The campaign amassed more than 75,000 installs by targeting Russian-speaking users seeking access to blocked services.
agenttrace-cli
Advanced tools
See what your AI coding agents actually accomplished — every Claude Code session mapped to the files it changed, the commits it produced, and whether they stuck. Local-first, zero backend.
How much of your AI's code actually survived? AgentTrace correlates every Claude Code session with your git history and gives you one number: the share of your agent's work that landed and stuck — versus what got reverted or never committed. Local-first, zero backend, zero telemetry.
You run coding agents all day, but you can't see whether their work lasts. That hour of edits — did it get committed and survive, or silently thrown away? AgentTrace reads the session transcripts already on your disk, matches them to commits, and shows you a survival rate — plus what each session changed, what it cost, and how to make the next one better. All in your terminal or a local dashboard, without sending anything anywhere.
Mac app — download the latest .dmg
(signed & notarized; Apple Silicon and Intel).
Command line — requires Node ≥ 20:
npx agenttrace-cli # list your sessions, newest first
The installed command is agenttrace (the npm package is agenttrace-cli).
Or clone and run from source (this path uses Node's TypeScript type-stripping,
so it needs Node ≥ 23.6 — no build step):
git clone https://github.com/Burakfenerci5/agenttrace && cd agenttrace
node src/cli.ts # same as `npx agenttrace-cli`
agenttrace # list every session, with outcome + cost
agenttrace show <id> # drill into one session (id prefix is enough)
agenttrace serve # open the local dashboard (http://127.0.0.1:4317)
agenttrace analyze <id> # print an agent-readable analysis (pipe it to your agent)
Everything runs against ~/.claude/projects on your machine. Nothing is uploaded.
rm -rf, payments) are flagged as worth
verifying.AgentTrace shows you what your agents reportedly did (heuristics over local logs). Its
sibling ActionProof lets you prove it:
Ed25519-signed, tamper-evident receipts for any action or session, verifiable offline.
If ActionProof is installed alongside AgentTrace, the dashboard's Sign button mints a
real receipt and shows a ✓ verified badge — the free-to-provable bridge, built in.
127.0.0.1 only; rejects any non-loopback Host and cross-origin request.npm run typecheck # tsc --noEmit
npm test # node:test suite
MIT
FAQs
See what your AI coding agents actually accomplished — every Claude Code session mapped to the files it changed, the commits it produced, and whether they stuck. Local-first, zero backend.
The npm package agenttrace-cli receives a total of 2 weekly downloads. As such, agenttrace-cli popularity was classified as not popular.
We found that agenttrace-cli demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
/Security News
The campaign amassed more than 75,000 installs by targeting Russian-speaking users seeking access to blocked services.

Company News
Open source maintainers are under more pressure than ever. We're raising our open source program from the Team plan to the Business plan, free.

Security News
The supply chain control that delays freshly published gems now covers lockfile generation and gem vendoring in Ruby projects.