project-deployment

Instructions for installing and operating ai-viewer on a workstation. ai-viewer is a local application with a web interface that displays data from several AI-agent session directories.

In plain words
What is it for?
Use it when installing or upgrading ai-viewer, choosing a system or user installation, finding agent-session sources, or resolving permissions and startup issues.
Why use it?
It gives consistent build, install, upgrade, run, and uninstall procedures and explains where programs and data are stored. It also documents the security reasoning for running the service as the workstation operator and keeping it accessible only locally.

Skill for Claude CodeCodex

Install

Getting it into your agent

One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.

agentmods
npx agentmods add skills/netdata/ai-viewer/project-deployment
Any agent
npx skills add netdata/ai-viewer --skill project-deployment
Clone the repo
git clone --depth 1 https://github.com/netdata/ai-viewer

Made for: Claude Code, Codex.

Per session 105 Skills are progressive disclosure: only the name and description are preloaded; the body loads when the skill is used.
When invoked 2,487 The whole file, excluding the scripts and references it only reads on demand.
Security scan B 2 findings. Scan, not verified.
Origin original No closer match found in the catalogue.
Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

ModelPer sessionOnce invoked
Fable 5 $0.00105 $0.02487
Opus 5 $0.00053 $0.01243
Sonnet 5 $0.00021 $0.00497
Haiku 4.5 $0.00011 $0.00249

Measured 2d ago against content hash ecb900746fef, method: parsed. Prices are Anthropic first-party input rates as of 2026-08-30, from the pricing page.

Security

Grade B, and why

project-deployment scanned grade B with 2 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 2d ago.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Downloads and executes remote codemediumSupply chain

curl | sh runs whatever the server returns today, which is not necessarily what it returned when this was reviewed.

curl -s http://127.0.0.1:7710/api/health | python3 -m json.tool # status + sources[] (want len ≥ 1)

Downgraded: this mod is about security review, or the phrase is quoted, so it is likely naming the pattern rather than instructing it.

Makes network callslowCapability

Not a fault in itself. Listed so you know the mod talks to something, and to what.

curl -s http://127.0.0.1:7710/api/health | python3 -m json.tool # status + sources[] (want len ≥ 1)
.agents/skills/project-deployment/SKILL.md · 118 lines

How it starts

The opening of the file, as written. The whole thing — 118 lines — stays where its author put it; the contents beside it link to each section on GitHub.

ai-viewer Deployment

This skill is the durable record of how ai-viewer gets installed and run on the operator's workstation. Load it for any install/upgrade/uninstall, source-discovery or permission issue, or "how do I use this" question. The contract lives in .agents/sow/specs/deployment.md; this file is the operational quick-reference.

TL;DR

  • System install (recommended): scripts/install-system.sh → binaries + data under /opt/ai-viewer, two system systemd units running as the operator, UI at http://127.0.0.1:7710/.
  • User install (no root): scripts/install-systemd-user.sh → binaries in ~/.local/bin, user systemd units, data in ~/.local/share/ai-viewer/.
  • Both are localhost-only (no auth in v1 — workstation-scoped).

The system install (scripts/install-system.sh)

What it does

  1. Rebuilds from source (scripts/build.sh — frontend + both Go binaries).
  2. Probes the installing operator's well-known agent-data paths and renders --source flags for each that exists:
    • ~/.ai-agent/sessionsaiagent_v3 + aiagent_v2 (same dir backs both)
    • ~/.claude/projectsclaude-code
    • ~/.codex/sessionscodex
    • ~/.local/share/opencode/opencode.dbopencode
  3. Lays out /opt/ai-viewer/{bin,data,logs}, atomically stages each rebuilt binary and renames it into place.
  4. Renders the unit templates (deploy/systemd-system/ai-viewer-{ingest,serve}.service) — substituting __OPERATOR_USER__, __OPERATOR_GROUP__, and __AI_VIEWER_SOURCES__ — into /etc/systemd/system/.
  5. systemctl daemon-reload, enables both units, stops active units, fixes ownership/permissions while they are down, starts the ingester, verifies ingester liveness, starts and verifies the server, re-checks ingester liveness, then prints the URL.

Commands

scripts/install-system.sh             # install or upgrade (rebuilds) + start + verify + print URL
scripts/install-system.sh status      # systemctl status for both + the URL
scripts/install-system.sh uninstall   # stop + disable + remove units + /opt/ai-viewer (data is disposable)

Read the full file on GitHub · 118 lines

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. 2d ago First seen · 118 lines · 105 tokens per session scan B ecb900746fef

Subscribe to this mod's changes

project-deployment is a skill published in the GitHub repository netdata/ai-viewer (2 stars, last pushed 2d ago), licensed MIT. It adds 105 tokens to every session and 2,487 once invoked, about $0.0005 per session on Opus 5. A static security scan graded it B with 2 findings (downloads and executes remote code, makes network calls). No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.

Related

Other skills, from other repositories

dd-code-generation

Use pup CLI for immediate Datadog operations or generate code for integration into applications.

DataDog/pup · 16 tokens

opentelemetry-net-instrumentation

Provides guidance for implementing OpenTelemetry instrumentation in .NET codebases, covering tracing (Activities/Spans), metrics, logs, naming conventions, error handling, performance, SDK setup, resources, context propagation, and API design best practices.

Aaronontheweb/dotnet-skills · 56 tokens

migrate-state-management

Migrate Redux or React Context to the correct state option (React Query for server state, nuqs for URL/shareable state, Zustand for global client state). Use when refactoring away from Redux/Context, moving state to the right store, or when the user asks to migrate state management.

SigNoz/signoz · 64 tokens

frontmcp-observability

Use when adding tracing, structured logging, metrics, or monitoring to a FrontMCP server. Covers zero-config OpenTelemetry distributed tracing across all flows; the this.telemetry API for custom spans, events, and attributes in tools, plugins, agents, and skills; structured JSON logging with trace correlation and…

agentfront/frontmcp · 177 tokens

golang-observability-opentelemetry

Instrumenting Go applications with OpenTelemetry for distributed tracing, Prometheus for metrics, and structured logging with slog.

bobmatnyc/claude-mpm-skills · 31 tokens

Observability Checklist

Reviews a service or codebase against a full observability checklist — logs, metrics, traces, and alerting gaps.

Notysoty/openagentskills · 28 tokens