Skip to main content

cc-trace

Assists in intercepting and analyzing Claude Code API requests using mitmproxy, enhancing debugging and optimization capabilities.

Install this skill

or
0/100

Security score

The cc-trace skill was audited on Mar 1, 2026 and we found 44 security issues across 4 threat categories, including 4 high-severity. Review the findings below before installing.

Categories Tested

Security Issues

high line 417

Curl to non-GitHub URL

SourceSKILL.md
4173. Test proxy with simple request: `curl -x http://127.0.0.1:8080 http://example.com`
medium line 949

Curl to non-GitHub URL

SourceSKILL.md
949# Test proxy with curl
medium line 202

Access to hidden dotfiles in home directory

SourceSKILL.md
202- Locate certificate: `~/.mitmproxy/mitmproxy-ca-cert.pem`
medium line 204

Access to hidden dotfiles in home directory

SourceSKILL.md
204- **macOS**: `sudo security add-trusted-cert -d -p ssl -p basic -k /Library/Keychains/System.keychain ~/.mitmproxy/mitmproxy-ca-cert.pem`
medium line 212

Access to hidden dotfiles in home directory

SourceSKILL.md
212- Guide creation of `proxy_claude` function in appropriate config file (~/.zshrc or ~/.bashrc)
medium line 242

Access to hidden dotfiles in home directory

SourceSKILL.md
242- Instruct to reload shell: `source ~/.zshrc` (or `source ~/.bashrc`)
medium line 246

Access to hidden dotfiles in home directory

SourceSKILL.md
246- Run bundled verification script: `bash ~/.claude/skills/cc-trace/scripts/verify-setup.sh`
low line 315

Access to hidden dotfiles in home directory

SourceSKILL.md
315~/.claude/skills/cc-trace/scripts/show-last-prompt.sh
low line 371

Access to hidden dotfiles in home directory

SourceSKILL.md
371pbpaste | npx tsx ~/.claude/skills/cc-trace/scripts/parse-streamed-response.ts
low line 440

Access to hidden dotfiles in home directory

SourceSKILL.md
440~/.mitmproxy/mitmproxy-ca-cert.pem
low line 818

Access to hidden dotfiles in home directory

SourceSKILL.md
818~/.mitmproxy/mitmproxy-ca-cert.pem
low line 820

Access to hidden dotfiles in home directory

SourceSKILL.md
820# 4. Add proxy_claude function to ~/.zshrc or ~/.bashrc
low line 824

Access to hidden dotfiles in home directory

SourceSKILL.md
824source ~/.zshrc # or source ~/.bashrc
low line 827

Access to hidden dotfiles in home directory

SourceSKILL.md
827bash ~/.claude/skills/cc-trace/scripts/verify-setup.sh
low line 842

Access to hidden dotfiles in home directory

SourceSKILL.md
842~/.claude/skills/cc-trace/scripts/show-last-prompt.sh
low line 844

Access to hidden dotfiles in home directory

SourceSKILL.md
844mitmdump -r ~/claude-flows.mitm -s ~/.claude/skills/cc-trace/scripts/extract-slash-commands.py
low line 921

Access to hidden dotfiles in home directory

SourceSKILL.md
921~/.mitmproxy/mitmproxy-ca-cert.pem
low line 957

Access to hidden dotfiles in home directory

SourceSKILL.md
957bash ~/.claude/skills/cc-trace/scripts/verify-setup.sh
low line 963

Access to hidden dotfiles in home directory

SourceSKILL.md
963pbpaste | npx tsx ~/.claude/skills/cc-trace/scripts/parse-streamed-response.ts
low line 969

Access to hidden dotfiles in home directory

SourceSKILL.md
969~/.claude/skills/cc-trace/scripts/show-last-prompt.sh
low line 972

Access to hidden dotfiles in home directory

SourceSKILL.md
972mitmdump -r ~/claude-flows.mitm -s ~/.claude/skills/cc-trace/scripts/extract-slash-commands.py
high line 58

Access to system keychain/keyring

SourceSKILL.md
58- **Permissions**: Ability to install certificates and modify system keychain (may require sudo/administrator)
high line 70

Access to system keychain/keyring

SourceSKILL.md
70**Example good tone**: "To intercept HTTPS traffic, install mitmproxy's certificate authority into the system keychain. This allows mitmproxy to decrypt secure connections for inspection while maintai
high line 204

Access to system keychain/keyring

SourceSKILL.md
204- **macOS**: `sudo security add-trusted-cert -d -p ssl -p basic -k /Library/Keychains/System.keychain ~/.mitmproxy/mitmproxy-ca-cert.pem`
medium line 435

Access to system keychain/keyring

SourceSKILL.md
435sudo security delete-certificate -c mitmproxy /Library/Keychains/System.keychain
medium line 439

Access to system keychain/keyring

SourceSKILL.md
439-k /Library/Keychains/System.keychain \
medium line 578

Access to system keychain/keyring

SourceSKILL.md
578sudo security delete-certificate -c mitmproxy /Library/Keychains/System.keychain
medium line 817

Access to system keychain/keyring

SourceSKILL.md
817-k /Library/Keychains/System.keychain \
medium line 920

Access to system keychain/keyring

SourceSKILL.md
920-k /Library/Keychains/System.keychain \
medium line 924

Access to system keychain/keyring

SourceSKILL.md
924sudo security delete-certificate -c mitmproxy /Library/Keychains/System.keychain
low line 150

External URL reference

SourceSKILL.md
150- Community Discord: https://discord.gg/mitmproxy
low line 196

External URL reference

SourceSKILL.md
196- **Windows**: Download installer from https://mitmproxy.org/
low line 218

External URL reference

SourceSKILL.md
218export HTTP_PROXY=http://127.0.0.1:8080
low line 219

External URL reference

SourceSKILL.md
219export HTTPS_PROXY=http://127.0.0.1:8080
low line 220

External URL reference

SourceSKILL.md
220export http_proxy=http://127.0.0.1:8080
low line 221

External URL reference

SourceSKILL.md
221export https_proxy=http://127.0.0.1:8080
low line 229

External URL reference

SourceSKILL.md
229echo "🔍 Proxy configured for mitmproxy (http://127.0.0.1:8080)"
low line 274

External URL reference

SourceSKILL.md
274- **Verification**: Browser opens to http://127.0.0.1:8081 showing empty flow list
low line 296

External URL reference

SourceSKILL.md
296- **Verification**: Browser opens to http://127.0.0.1:8081 showing empty flow list
low line 417

External URL reference

SourceSKILL.md
4173. Test proxy with simple request: `curl -x http://127.0.0.1:8080 http://example.com`
low line 839

External URL reference

SourceSKILL.md
839# Navigate to: http://127.0.0.1:8081
low line 930

External URL reference

SourceSKILL.md
930export HTTP_PROXY=http://127.0.0.1:8080
low line 931

External URL reference

SourceSKILL.md
931export HTTPS_PROXY=http://127.0.0.1:8080
low line 950

External URL reference

SourceSKILL.md
950curl -x http://127.0.0.1:8080 http://example.com
Scanned on Mar 1, 2026
View Security Dashboard
Installation guide →