Shadcn UI

Build accessible, customizable UIs with shadcn/ui, Radix UI, and Tailwind CSS. Use when setting up shadcn/ui, installing components, building forms with React Hook Form + Zod, customizing themes, or implementing component patterns.

This instruction-only skill appears to be a documentation/helper for shadcn/ui and mostly coherent, but exercise caution before following its commands: - Source unknown: The skill's Source/Homepage are not provided. Prefer official shadcn/ui docs (https://ui.shadcn.com) or the official GitHub repo over an unverified skill. - npx risks: The guide recommends running npx shadcn@latest (and an odd `npx add https://...` line). npx fetches and runs remote code. Only run these commands if you trust the package name and verify the upstream source first. - Inspect before executing: If you run npx shadcn@latest or similar, review the downloaded scripts (or run in an isolated environment/container) before letting them modify your project. - Odd/corrupted snippets: Some examples in extended-components.md are malformed (embedded commands inside JSX, truncated returns). Treat code samples as illustrative and double-check them before copy-pasting into a real project. - Safer alternatives: Use the official shadcn/ui documentation and packages, or clone the official GitHub repo directly. If you decide to install this skill, do so in a sandbox or only after verifying the upstream sources. If you want higher confidence, ask the publisher for the skill's source URL or a verified homepage, or request that the skill maintainer point to the exact npm package or repository that the SKILL.md references.

Type: OpenClaw Skill Name: shadcn Version: 1.0.0 The skill is classified as suspicious due to a highly unusual and potentially exploitable URL found within a code example in `references/extended-components.md`. The malformed URL `http://https:%2F%2Fcontext7.com%2Fwebsites%2Fshadcn_io%2Fllms.txt/thumbnail.jpg` points to an external, unrelated domain (`context7.com`) with a suspicious path (`llms.txt`), indicating a potential attempt at prompt injection, unauthorized network access, or information gathering against the AI agent.