Shadcn Ui

v1.0.0

Use when building UI with shadcn/ui components, Tailwind CSS layouts, form patterns with react-hook-form and zod, theming, dark mode, sidebar layouts, mobile...

0· 59·0 current·0 all-time
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Pending
View report →
OpenClawOpenClaw
Benign
high confidence
Purpose & Capability
Name/description match the content: the SKILL.md contains guidance for shadcn/ui, Tailwind, react-hook-form/zod, and shows CLI usage (npx shadcn...). There are no unexpected environment variables, binaries, or unrelated credentials declared.
Instruction Scope
Runtime instructions are focused on adding shadcn components, form patterns, and UI patterns. The only shell commands are npx shadcn@latest init/add, and examples are project-local code samples. The instructions do not ask the agent to read unrelated system files, exfiltrate data, or call unknown endpoints.
Install Mechanism
This is an instruction-only skill (no install spec or code files). It suggests using npx shadcn@latest, which will fetch a package from the npm ecosystem when executed by the user — this is expected for the stated purpose but the user should be aware running npx @latest pulls remote code at runtime.
Credentials
No environment variables, credentials, or config paths are requested. The SKILL.md does not reference hidden secrets or other services beyond typical project dependencies.
Persistence & Privilege
Skill is not forced-always, is user-invocable, and allows normal autonomous invocation by the agent (default). It does not request permanent system-wide presence or modify other skills' configs.
Assessment
This skill is a coherent, text-only guide for working with shadcn/ui. Before running any npx shadcn@latest commands yourself, consider pinning a specific version rather than @latest and inspect the package you fetch (or run in an isolated/dev environment). Also note the package's source/homepage is unspecified in the skill metadata — if you need a verifiable upstream, locate the official repo or npm package before installing.

Like a lobster shell, security has layers — review code before you run it.

latestvk97frzgsh86yqb8p1axqgg1qns84bdr9

License

MIT-0
Free to use, modify, and redistribute. No attribution required.

Comments