ClawHub

React Composition

v1.0.0

React composition patterns for scalable component architecture. Use when refactoring components with boolean prop proliferation, building flexible component libraries, designing reusable component APIs, or working with compound components and context providers.

⭐ 0· 814·2 current·2 all-time
by@wpank
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Benign
high confidence
✓
Purpose & Capability
The name and description (React composition patterns) match the SKILL.md and README content: both contain design guidance and example code for compound components, context providers, and state-lifting. No unrelated capabilities or credentials are requested.
✓
Instruction Scope
The runtime instructions are purely documentation and examples showing patterns and sample code; they do not instruct the agent to read local files, environment variables, or transmit data to external endpoints. There is no scope creep in the SKILL.md content.
ℹ
Install Mechanism
There is no formal install spec included (instruction-only), which is low risk. The README suggests using npx (e.g., `npx clawhub@latest install react-composition` and an `npx add https://github.com/...` line). Those commands would execute code fetched from the network if run — treat them as external-install actions and verify the source before running. The README's `npx add` URL points to a GitHub tree (not a standard package URL), which is unusual and worth manual verification.
✓
Credentials
The skill declares no required environment variables, no credentials, and no config paths. The SKILL.md does not reference hidden env vars or secrets. Requested privileges are proportional to the skill's purpose (none).
✓
Persistence & Privilege
The skill is not configured to be always-enabled and does not request persistent system presence. It's user-invocable only and contains no install-time scripts or mechanisms that would modify other skills or system-wide settings.
Assessment
This skill is documentation-only and appears coherent for teaching React composition patterns. Before installing or running any suggested npx commands, verify the author and source (the registry owner is an opaque ID and homepage is missing). If you plan to run the npx install commands, inspect the repository or package contents first — npx can execute remote code. Prefer cloning or reviewing the skill files locally rather than blindly running network-installer commands, and check license and attribution if you will include examples in your codebase.

Like a lobster shell, security has layers — review code before you run it.

latestvk973hpeyr67abnq3cxr4g4vyq580wjv8

License

MIT-0
Free to use, modify, and redistribute. No attribution required.
Termshttps://spdx.org/licenses/MIT-0.html

Comments