Tracebit Canaries Skill

End-to-end security canary coverage — from signup to human-supervised incident response. You (the agent) perform setup steps yourself, with human confirmation at key decision points.

The Tracebit CLI runs a lightweight background service that refreshes canary token expiry — no other network calls or file access. When the heartbeat inbox check detects a canary alert email, you notify the human, investigate (read-only), and report.

Tracebit Community Edition is free at https://community.tracebit.com

Security & Transparency

This skill is user-initiated, user-supervised, and fully reversible. For full details — including file traceability, enforcement model, and removal — see references/security-compliance.md.

Skill file writes (created by agent instructions in SKILL.md, not by shell scripts):

• /tmp/tracebit-setup-creds — temporary signup password (Step 1, chmod 600, deleted after use)
• HEARTBEAT.md — canary alert check block (Step 6, append)
• memory/security-incidents.md — incident log (playbook Phase 2.2, append-only, only on alert)