Session Debug

What the source does

• FilesystemNone observedNo reads or writes in the source
• NetworkNone observedNo outbound calls in the source
• ShellNone observedNo commands run in the source
• DependenciesPinnedNothing floats
• SecretsNone foundNo keys in source

Five audit layers

Gates applied: no behavioural pass.

Audit 0.4.1 · source sha 1f059c400d07 · 16 Oct 2026Report an issue or request a re-scan

• Publisherhoangsonww GitHub userOwner of the repository this skill is read from
• Source folderhoangsonww/Claude-Code-Agent-Monitor/plugins/ccam-devtools/skills/session-debugThe exact folder we audited
• LicenceMITAs the repository states it
• Commit pinned for this verdict1f059c400d07A new audit runs when the source changes
• Repository statusNot archivedLast push 4 days ago
• Sandboxed runNot runSkills are read, not executed; layer L4 is skipped

Its description: Debug a specific session by inspecting its full event chain (PreToolUse, PostToolUse, Stop, SubagentStop, Compaction, APIError, TurnDuration, Notification events), agent hierarchy (recursive parent/child tree with…

---
name: session-debug
description: >
  Debug a specific session by inspecting its full event chain (PreToolUse,
  PostToolUse, Stop, SubagentStop, Compaction, APIError, TurnDuration,
  Notification events), agent hierarchy (recursive parent/child tree with
  subagent_type and depth), token usage with compaction baselines, workflow
  intelligence data (orchestration DAG, error propagation by depth), and
  session metadata (thinking_blocks, turn_count, total_turn_duration_ms).
---

# Session Debug

Debug and inspect a Claude Code session from Agent Monitor data.

## Input

The user provides: **$ARGUMENTS**

This may be:
- A session ID to debug
- "latest" or "last" for the most recent session
- "errors" to find and debug the most recent errored session

## Procedure

1. **Identify the target session**:
   - If session ID given: `GET /api/sessions/{id}` from `http://localhost:4820`
   - If "latest": `GET /api/sessions?limit=1` (default sort: most recently updated first)
   - If "errors": `GET /api/sessions?limit=10&status=error`

2. **Collect full session data**:
   - Session metadata: status, model, cwd, timestamps, duration
   - Events: `GET /api/events?session_id={session_id}` — full event timeline
   - Agents: `GET /api/agents?session_id={session_id}` — all agents in session
   - Cost: `GET /api/pricing/cost/{session_id}`

3. **Analyze the session**:

   ### Session Lifecycle
   - Start time → first event → last event → end time
   - Status transitions (active → working → completed/error)
   - Total duration and active-vs-idle time

   ### Event Chain Analysis
   - Chronological event list with timestamps and durations
   - Identify the **critical path** (longest chain of dependent events)
   - Flag events that took unusually long
   - Highlight error events with full error context

   ### Agent Inspection
   - List all agents: type, task, status, duration
   - Subagent tree visualization (parent → children)
   - Agents that failed and their last known state
   - Agent switching patterns (when and why new agents spawned)

   ### Tool Execution Trace
   - Every tool invocation in order with: tool name, duration, success/failure
   - Failed tool calls with error messages
   - Tool retry patterns (same tool called multiple times)

   ### Anomaly Detection
   - Events out of expected order
   - Gaps in event timeline (>30s with no events)
   - Duplicate events or agent states
   - Token usage spikes (compaction indicators)

4. **Diagnosis**:
   - Root cause hypothesis (if errors present)
   - Contributing factors
   - Remediation suggestions

## Output Format

Present as a debug report with:
- Session summary header (ID, status, model, duration, cost)
- Color-coded timeline (✅ success, ❌ error, ⚠️ warning, i️ info)
- Agent tree diagram
- Diagnosis section with numbered findings

Excerpt, first 2,826 characters of SKILL.md, verbatim from the audited commit. It is text from someone else’s repository, quoted so you can judge it before your agent reads it.

1. 2026-10-16
   ✓SAFE B 89 / 100

   first audit · source 1f059c400d07

Questions about Session Debug

• github.com/hoangsonww/Claude-Code-Agent-Monitor/tree/master/plug — the audited source at commit 1f059c400d07 and every finding aboveObserved · 16 Oct 2026

Spotted something wrong? Report a correction · Methodology