ClawHub

Ai Elements

v1.1.0

Vercel AI Elements for workflow UI components. Use when building chat interfaces, displaying tool execution, showing reasoning/thinking, or creating job queu...

⭐ 0· 59·0 current·0 all-time
byKevin Anderson@anderskev
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Benign
high confidence
✓
Purpose & Capability
Name/description (Vercel AI Elements UI components) match the contents of SKILL.md and the included reference docs. No unrelated binaries, env vars, or config paths are requested.
✓
Instruction Scope
SKILL.md contains usage, API, and an installation suggestion for a front-end component library. It does not instruct the agent to read system files, access secrets, or exfiltrate data. Most instructions are about importing components and expected behavior in a React app.
ℹ
Install Mechanism
The skill is instruction-only and the registry has no install spec. SKILL.md recommends running 'npx shadcn@latest add https://ai-elements.vercel.app/r/[component-name]'. That is an expected installation pattern for shadcn components, but it will execute code fetched from a remote endpoint (ai-elements.vercel.app) via npx — a normal developer flow for front-end packages but something to be cautious about because it runs remote JavaScript. The registry entry itself does not provide a source repo or homepage to verify the package.
✓
Credentials
No environment variables, credentials, or config paths are requested. The documentation describes browser-side features (file drop, blob->data URL conversion, Web Speech API) which are appropriate for UI components and do not require server secrets.
✓
Persistence & Privilege
Skill is not always-enabled and does not request persistent system privileges. As an instruction-only skill it will not install anything autonomously; the SKILL.md only suggests an npx command that a developer would run manually.
Assessment
This skill is documentation for a UI component library and appears internally consistent. Before running the suggested 'npx shadcn add ...' command, verify the package source: look for an official repository or homepage, inspect the files the installer will add, and prefer installing from a known registry or GitHub release. Because npx executes remote JavaScript, only run it for code you trust. No credentials or special privileges are requested by the skill itself.

Like a lobster shell, security has layers — review code before you run it.

latestvk97ee63q7x2xv4p99t3n2ej2yx83pfg0

License

MIT-0
Free to use, modify, and redistribute. No attribution required.
Termshttps://spdx.org/licenses/MIT-0.html

Comments