security-agent_skill

Overview

This skill operates and debugs the TriClaude sidecar/A2UI visualization pipeline for security-agent sessions. It produces reliable A2UI/Pulse HTML, diagnoses blank or missing visualizations, and performs safe edits to the a2ui_input.log and sidecar files. Use it to route intents, recover a blank Pulse view, and confirm rendering status across endpoints.

How this skill works

The skill inspects project state via the local API to discover the active terminalId, sidecar port, and runtime log paths. It acquires a file checkout lock, appends properly formatted A2UI HTML blocks with timestamps to a2ui_input.log, and calls both POST /api/a2ui-content and GET /api/a2a/vizit-latest/<terminalId> to verify rendering. When necessary it restarts the sidecar, checks for created viz_*.html files, and then releases the checkout lock.

When to use it

• Pulse visualization is blank or shows HTTP 204 for vizit-latest
• A2UI cards or sidecar content are not rendering in the UI
• You need to append or regenerate visualization HTML that must route to the correct terminal
• Sidecar keeps restarting or you suspect persistence issues for visualizations
• You want a safe, reproducible workflow to update a2ui_input.log and verify results

Best practices

• Always query /api/projects to resolve activeTerminalId and sidecarPort; don’t guess IDs
• Acquire a checkout lock before any file modification and release it afterward
• Append with >> and wrap HTML with <!-- A2UI:START --> and <!-- A2UI:END -->, including a unique timestamp comment
• Verify both POST /api/a2ui-content (HTML) and GET /api/a2a/vizit-latest/<terminalId> (HTTP 200) to determine where the failure lies
• If vizit-latest is 204, restart the sidecar, append a fresh timestamped block, then confirm viz_*.html was created

Example use cases

• User reports Pulse section empty — run project discovery, check vizit-latest, restart sidecar if needed, append timestamped A2UI, reverify
• A2UI panel not rendering — POST to /api/a2ui-content to confirm HTML output and inspect a2ui_input.log for correct A2UI markers
• Automate a safe update: checkout file, append A2UI block with timestamp, verify endpoints, then release checkout
• Investigate intermittent sidecar restarts: collect sidecar port, restart via API, confirm viz_*.html generation and HTTP 200 for vizit-latest
• When asked to reuse a prior visual style, read the style guide and reuse the same family while updating content only