Generates production-ready React TSX frontend components from natural-language UI goals for non-programmers, including setup instructions and dependencies.
Security Analysis
high confidenceThe skill's declared purpose (generate production-ready React TSX components) aligns with its requirements and runtime instructions; it is an instruction-only meta-skill that coordinates upstream frontend skills and does not request unrelated credentials or system-wide privileges.
Name/description ask for React TSX components; declared requirements (node, npm, npx) and the instructions to install frontend-design-ultimate, shadcn-ui, and react-expert via npx are coherent with that purpose. No unrelated credentials, binaries, or config paths are requested.
SKILL.md focuses on collecting UI inputs, orchestrating three upstream skills, and producing a single TSX output plus setup instructions. It does not instruct reading arbitrary host files, secrets, or system state beyond expecting a React/TS/Tailwind project and running installation commands when needed.
The skill is instruction-only (no install spec). It instructs using npx -y clawhub@latest install ... and npx shadcn@latest init/add which will download and run code from npm at install time. This is expected for a meta-skill that composes other skills, but users should be aware these commands fetch third-party packages and may modify project files.
No environment variables or credentials are requested. The required tools (node, npm, npx) are appropriate and proportional to a tool that generates and installs frontend code.
always is false and the skill does not request permanent agent presence or elevated privileges. The SKILL.md does instruct running install commands that modify the local project, which is expected behavior and limited in scope to the user's workspace.
Guidance
This skill appears internally consistent with its stated purpose. Before installing or running its suggested commands: 1) verify you trust the 'clawhub' npm package and the upstream skills it will fetch (they will be downloaded and executed via npx); 2) run install/init commands in a sandboxed or version-controlled project (shadcn init/add and other installers can modify files); 3) review any generated TSX and dependency commands before applying to production (check licenses and third-party package versions); 4) if you prefer not to let the agent run installers automatically, decline those steps and run them manually after inspection. Confidence is high because the skill is instruction-only and requests only appropriate tools, but running its install commands will pull third-party code so exercise normal supply-chain caution.
Latest Release
v1.0.0
Initial release: Major upgrade from general frontend guidance to a meta-skill for generating ready-to-use React UI. - Combines frontend-design-ultimate, shadcn-ui, and react-expert for orchestrated code generation. - Produces a single TSX file plus explicit setup and dependency instructions, tailored for non-programmers. - Collects detailed UI requirements and upstream skills' outputs for robust design, theming, and TypeScript logic. - Includes rigorous guardrails for missing dependencies, output quality, and adaptation notes. - Adds references/inspected-skills.md for internal skill inspection tracking.
More by @h4gen
Published by @h4gen on ClawHub
