AgentStack
Browse Sign in
Browse Why AgentStack Sell Docs
Sign in
SKILL verified MIT Self-run

Shadcn Ui

skill-nahid-sparktales-agent-dispatcher-shadcn-ui · by nahid-sparktales

Work with shadcn/ui components and the Radix primitives under them — components are copied into the repo and are your source, so customize them in place, know that re-running the generator overwrites local edits, and know which accessibility behaviour Radix gives you and which it does not. Fires when adding, customizing or debugging a component in a repo with components.json and a vendored UI dir…

— No reviews yet
0 installs
0 views
— view→install

Install

$ agentstack add skill-nahid-sparktales-agent-dispatcher-shadcn-ui

✓ scanned · ✓ verified, works with Claude Code, Cursor, and more.

Security review

✓ Passed

No issues found. Passed automated security review. · v0.1.0 How review works →

  • ✓ Prompt-injection patterns
  • ✓ Secret / credential exfiltration
  • ✓ Dangerous shell & filesystem operations
  • ✓ Untrusted network calls
  • ✓ Known-malicious package signatures

What it can access

  • ✓ Network access No
  • ✓ Filesystem access No
  • ✓ Shell / process execution No
  • ✓ Environment & secrets No
  • ✓ Dynamic code execution No

From automated source analysis of v0.1.0. “Used” means the capability is present in the source — more access means more to trust, not that it’s unsafe.

View the full security report →

Verified badge

Passed review? Show it. Paste this badge into your README, it links to the public security report.

AgentStack Verified badge Links to your public security report.
[![AgentStack Verified](https://agentstack.voostack.com/badges/verified.svg)](https://agentstack.voostack.com/security/report/skill-nahid-sparktales-agent-dispatcher-shadcn-ui)

Reliability & compatibility

✓ Security review passed
0 installs to date
— no reviews yet
● 2d ago

Declared compatibility

Claude CodeClaude Desktop

Compatibility is declared by the source manifest. End-to-end runtime verification is coming, see below.

Preview Execution monitoring

We're building live execution health for every listing: tool-call success rate, median latency, uptime, and last-checked timestamps, measured, not self-reported. It isn't live yet, so we don't show numbers we can't stand behind.

How agent discovery & health will work →
Are you the author of Shadcn Ui? Claim this listing to set pricing, connect Stripe payouts, and keep 70% of every sale.
Sign up to claim

About

shadcn/ui and Radix primitives

These components are not a dependency. The generator copied source into the repository, and from that moment it is ordinary project code that nobody upstream will patch for you.

When this fires

Adding, customizing or debugging a shadcn/ui component in a project that has components.json and a vendored UI directory. It does not fire for choosing a component library, for a project using a conventional installed component package, or for a full accessibility audit.

Procedure

  1. Confirm the model before assuming it. components.json, a UI directory of component source,

and @radix-ui/* entries in package.json together mean copy-in. Read components.json for the path aliases and conventions the generator will use — it decides where files land.

  1. Check whether the component already exists in the repo before adding it. Re-running the

generator for a component that is already there overwrites the file, including every local change. If the file exists and has been customized, adding it again is destructive — stop and ask rather than regenerating over someone's work.

  1. Add via the project's own generator invocation. Take the exact command from the project's

README or scripts; the CLI's package name and flags have changed across versions, so do not type one from memory. If the generator cannot be run here, copy the upstream component source into the same directory by hand and add the Radix dependency it imports — do not hand-roll a substitute primitive, and do not silently skip the dependency.

  1. Customize in place. That is the model, not a workaround. Editing the vendored file is the

intended way to change these components. Prefer the two low-damage forms: add a variant to the component's existing variant definition, and change appearance through the theme tokens rather than by rewriting markup (see tailwind).

  1. Wrap instead of edit when the change is product-specific. A project-specific composition

(your form field, your confirm dialog) belongs in a wrapper around the primitive, leaving the vendored file close to upstream and re-addable. Deep edits to the vendored file are fine, but they are the file you can no longer regenerate cheaply.

  1. Record which vendored files carry local edits. A comment at the top of the file, or a line

in the project's own notes — whichever the project already does. Without it, the next person regenerates and loses the change silently.

  1. Keep the component's class-merge path intact. These components merge an incoming className

with their own classes through a merge helper; if you rewrite that, caller overrides stop working in ways that look like a styling bug.

  1. Use asChild correctly when composing triggers. It renders the primitive's behaviour onto

your child element instead of its own: the child must be a single element that forwards props and ref. A fragment, two children, or a component that drops props produces a control that looks right and does nothing.

  1. Know what Radix gives you and what it does not. Free from the primitive: keyboard

interaction and focus management for the pattern, focus trapping and restoration in overlays, dismissal behaviour, correct roles and state attributes, and the internal wiring between a trigger and its content. Not free: an accessible name for an icon-only trigger, a label associated with your own input, error text wired to the field it describes, colour contrast, heading order, honouring reduced-motion, and a visible focus indicator if you removed the ring. Those are yours every time.

  1. Verify with the keyboard and the accessibility tree, not a screenshot — tab to the control,

operate it, Escape out of it, and check the name it exposes. Rendered verification is browser-verification.

Checklist

  • [ ] components.json read; the component's target path known
  • [ ] Existing file checked before any generator run, and overwrite consent obtained if needed
  • [ ] Generator command taken from the project, not from memory
  • [ ] Customization done in place, preferring variants and theme tokens
  • [ ] Product-specific behaviour put in a wrapper, not baked into the primitive
  • [ ] Local edits to vendored files recorded
  • [ ] className merge path intact; caller overrides still apply
  • [ ] Every asChild usage has exactly one prop-and-ref-forwarding child
  • [ ] Icon-only controls have accessible names; inputs have associated labels
  • [ ] Focus visible, keyboard path walked, Escape/dismiss checked

Failure handling

  • A caller's className does nothing — the merge helper was bypassed or the class conflicts

with the component's own. Fix the merge, not with !important.

  • A trigger renders but does not open — suspect asChild with a child that swallows props or

ref, or two children where one is required.

  • The component switches between controlled and uncontrolled — a value prop that starts

undefined and later becomes defined. Pick one mode and keep it.

  • "Upgrade shadcn" is asked for — there is no upgrade command for code you own. Diff the

current upstream source against each vendored file and apply changes deliberately, file by file, keeping local edits. Say which files you did not touch.

  • The generator is unavailable or offline — say so, copy the source manually or stop; do not

invent an approximation of a primitive and present it as the component.

  • Accessibility looks handled because Radix is present — it is not a conclusion you can draw

from the import. The list in step 9 is checked by hand or reported as unchecked.

Evidence to report

Which components were added or edited and at what paths; whether each vendored file now carries local changes; how customization was done (variant, token, wrapper, direct edit); the keyboard and accessibility-tree checks you actually performed and what they showed; and anything from the step-9 list you did not check.

Source & license

This open-source skill is cataloged on AgentStack and links to its original source — we do not rehost the code.

Install and usage instructions live in the source repository linked above.

Reviews

No reviews yet, be the first.

Versions

  • v0.1.0 Imported from the upstream source.