Skip to content
Back to skills

Webui And Operations

ASecurity

"Operate SimpleTuner WebUI, REST API, local job queue, workers,

  • 247 stars
  • 0 votes
  • 0 copies
  • 5 views
  • Added September 9, 2026
documentationpythongobashapisecuritydocumentation

Works with

  • cli
  • api

Security analysis

A100/100

Pro scans all 6 files and shows the line behind each finding

Scanned September 9, 2026

npx -y skills add VectorSpaceLab/AREX-Skill --skill webui-and-operations --agent claude-code

Installs into .claude/skills of the current project.

Are you the author of Webui And Operations?

Add the live security badge to your README. It updates with every re-scan.

Security grade badge for Webui And Operations
[![Security: A — Skills Directory](https://www.skillsdirectory.com/api/skills/vectorspacelab-webui-and-operations/badge)](https://www.skillsdirectory.com/skills/vectorspacelab-webui-and-operations)

More formats (shields.io, HTML) on the badges page. Keep it an A: scan every change in CI with Pro.

Download with Pro
SKILL.md
---
name: webui-and-operations
description: "Operate SimpleTuner WebUI, REST API, local job queue, workers,
  cloud jobs, auth, quotas, metrics, and webhooks."
disable-model-invocation: true
metadata:
  disco-role: operating
license: AGPL 3.0
---

# webui-and-operations

Use this sub-skill when a SimpleTuner task is about running the WebUI/API server, scripting the REST API, managing local or worker queues, submitting or inspecting cloud jobs, configuring auth and user access, handling quotas/approvals, reading metrics/audit logs, or wiring webhooks.

Do not start servers, submit jobs, upload datasets, rotate credentials, approve spend, or stop active training unless the user explicitly confirms the target server, config name, credentials/auth method, and operational impact.

## Router

1. **WebUI server and REST API**: read [webui-server-and-api](references/webui-server-and-api.md) for `simpletuner server`, WebUI onboarding, config environments, API training flow, status/events, manual validation/checkpoint triggers, reverse proxy notes, and curl planning.
2. **Queue, cloud, and workers**: read [job queue, cloud, and workers](references/job-queue-cloud-workers.md) for local GPU-aware queueing, cloud job lifecycle, concurrency, approvals, provider constraints, worker orchestration, worker labels, and CLI/API management commands.
3. **Auth, security, quotas, and audit**: read [security and auth](references/security-and-auth.md) for first-admin setup, API keys, user levels, OIDC/LDAP, registration policy, audit logs, cost limits, and approval governance.
4. **Operational failures**: read [troubleshooting](references/troubleshooting.md) for server launch, authentication, SSE/log streaming, job queue, worker, cloud, webhook, external auth, and audit-chain failures.

## Safe curl skeleton builder

Use the bundled helper to print command skeletons only; it never makes network calls:

```bash
python skills/disco/simple-tuner/sub-skills/webui-and-operations/scripts/build_api_training_plan.py --help
python skills/disco/simple-tuner/sub-skills/webui-and-operations/scripts/build_api_training_plan.py --base-url http://localhost:8001 --config-name flux-lora --mode both --include-stop
```

## Boundaries

Handle here:

- WebUI onboarding, server process options, OpenAPI discovery, REST-driven config activation/validation/start/status/stop, and webhooks.
- Queue status, GPU allocation, local job submission, worker dispatch targets, cloud job CLI/API operations, provider setup, cost limits, and approvals.
- First-admin setup, users, permission levels, API keys, OIDC/LDAP providers, audit log inspection, and security posture for shared services.

Reroute out:

- Dataloader JSON, dataset schema, captions, caches, and dataset upload contents: use data-and-config.
- Training hyperparameters, model-family choices, memory/distributed runtime, and direct CLI training commands: use training-workflows.
- Adapter conversion, model registry, LoRA/LyCORIS extraction/merge, and model tooling: use model-and-adapter-tooling.
- Source code edits, WebUI implementation changes, repository tests, docs/translations, and public-text privacy checks: use repo-development.

## Evidence base

This sub-skill distills repository-relative evidence from `documentation/webui/TUTORIAL.md`, `documentation/api/TUTORIAL.md`, `documentation/api/WEBHOOKS.md`, `documentation/JOB_QUEUE.md`, `documentation/experimental/cloud/README.md`, `documentation/experimental/server/README.md`, `documentation/experimental/server/WORKERS.md`, `documentation/experimental/server/EXTERNAL_AUTH.md`, `documentation/experimental/server/AUDIT.md`, `simpletuner/cli/server.py`, `simpletuner/cli/jobs.py`, and `simpletuner/cli/cloud/__init__.py`. Source evidence is cited by repo-relative name only; this runtime sub-skill should be usable without reopening the source checkout.

Files in this skill

  • SKILL.md3.8 KB
  • references/job-queue-cloud-workers.md7.6 KB
  • references/security-and-auth.md5.4 KB
  • references/troubleshooting.md7.9 KB
  • references/webui-server-and-api.md5.5 KB
  • scripts/build_api_training_plan.py7.7 KB

Attribution

Is this your skill, or is something wrong with this listing? Request removal or report an issue. Author removals are honored within 72 hours.

Comments

Loading comments…

Newsletter

Get the weekly list of safe new skills, and the ones we pulled.