Complete shadcn/ui documentation. Beautifully designed components built with Radix UI and Tailwind CSS. Copy-paste into your apps. Covers installation, components, theming, forms, charts, and framework integrations.
Security Analysis
high confidenceThis is an instruction-only skill that bundles the official shadcn/ui documentation (MDX files); the metadata, requirements, and content are coherent with its stated purpose and it does not request credentials or install code.
The skill name and description match the included files: 201 MDX docs for shadcn/ui (installation, components, theming, CLI, registries, MCP, etc.). It requests no binaries, no env vars, and exposes documentation only, which is proportionate to 'Complete Documentation'.
SKILL.md and included docs are documentation-only and do not instruct the agent to read system files or exfiltrate data. They do, however, include operational guidance that references running external commands (e.g., `npx shadcn@latest ...`) and configuring MCP/registries (including examples that show env var expansion). That guidance could lead a user or agent to run networked CLI commands or provide registry tokens, but the skill itself does not request or perform those actions.
No install spec and no code files to execute — the skill is instruction-only (lowest install risk). The package only contains documentation (MDX) and no downloads or extract steps are present.
The skill declares no required environment variables and no primary credential. The docs include examples showing use of environment variables (e.g., ${REGISTRY_TOKEN}) for registry authentication, but the skill does not actually request those secrets. This is informational rather than a demand for credentials, but users should be aware the documented workflows may require tokens when followed.
always is false and the skill is user-invocable; model invocation is allowed (platform default). The skill does not request system-wide config changes or attempt to persist credentials — it only provides docs that describe how to configure external MCP servers and CLIs.
Guidance
This package is documentation-only and appears to be what it claims: a local copy of the shadcn/ui docs. It does not ask for credentials or install code by itself. If you follow its instructions (for example, running `npx shadcn@latest` commands, initializing an MCP server, or adding custom registries), exercise normal caution: only run CLI commands from trusted sources, review any packages or registry items before installing them, and never paste secret tokens into third-party registries without verifying the registry's trustworthiness. If you plan to enable the MCP workflows described, understand that those workflows may prompt you to provide registry tokens or allow network access — review and limit those tokens' scope where possible.
Latest Release
v0.1.0
Initial release, providing comprehensive shadcn/ui documentation. - Includes 201 MDX files (1.4MB) covering installation, over 50 components, theming, forms, charts, and framework integrations. - Offers step-by-step setup guides for Next.js, Vite, Remix, Astro, Laravel, Gatsby, React Router, and Tanstack Router. - Covers advanced topics like CLI usage, custom registries, theming, RTL support, Figma integration, and accessibility. - Documentation extracted directly from the official shadcn/ui repository, ensuring up-to-date and accurate information. - Designed for easy copy-paste of customizable, accessible React UI components based on Radix UI and Tailwind CSS.
More by @leonaaardob
Published by @leonaaardob on ClawHub
