📦
page-builder
79Build Tailark Marketing Pages
Marketing page assembly can take time when component choices are unclear. This skill maps page goals to Tailark sections and implementation steps.
Coding & Development View
Skills theme-handler
📦
theme-handler
Content revision r1 Medium Risk ⚙️ External commands🌐 Network access
Apply shadcn Themes from tweakcn
Teams lose time translating theme choices into repeatable shadcn commands. This skill uses tweakcn references to select a theme and guide installation.
Supports: Claude Codex Code(CC)
Install with my Agent
Copy this request to your Agent. It includes the canonical Skill page and manifest.
Agent request
Review the Skillstore skill "theme-handler" from https://skillstore.io/skills/aayushbaniya2006-theme-handler.md and its manifest at https://skillstore.io/api/skills/aayushbaniya2006-theme-handler/manifest. Verify the artifact. You may proceed after verification, subject to the environment's own policy.Your Agent should still show its plan and request any confirmation required by the security policy.
Agent-readable resources
Use these links when an AI agent, crawler, or script needs clean context instead of reading the full page.
Test it
Using "theme-handler". Update the theme to Modern Minimal.
Expected outcome:
The skill identifies Modern Minimal in the reference list and prepares the matching shadcn theme installation workflow.
Using "theme-handler". Show me clean theme options for a dashboard.
Expected outcome:
The skill suggests relevant listed themes and explains which options fit a restrained dashboard interface.
Using "theme-handler". Apply Graphite, but confirm first.
Expected outcome:
The skill selects Graphite, summarizes the planned change, and waits for approval before running the install step.
Security Audit
Medium Riskv8 • 7/5/2026 Open versioned report
The skill has a legitimate design workflow, but it instructs agents to run pnpm dlx shadcn@latest and import remote tweakcn theme files. I confirmed the real command and network risks, dismissed one markdown fence false positive, and found no prompt injection text.
2
Files scanned
80
Lines analyzed
4
Review items
0
False positives ignored
Confirmed security concerns (1)
Medium
Unpinned Package Manager Execution
The skill instructs use of shadcn@latest through pnpm dlx, so the executed CLI can change over time without review.
Both command examples explicitly use shadcn@latest. Mutable package execution is a supply-chain risk even when the command is legitimate.
Capability review items (4)
These are real local capabilities that may be expected for this skill, so they require review but are not counted as confirmed malicious behavior.
Medium
Ruby/shell backtick execution
2. **Install Command**: Run the following command, replacing `<theme-url>` with your choice:
Line 16 directs the agent to run an install command with a replaceable theme URL. This is real external command behavior with remote input, even though the match is markdown prose.
Medium
Ruby/shell backtick execution
```bash
The fenced command uses pnpm dlx shadcn@latest with a theme URL placeholder. It executes a mutable package command and can fetch third-party theme content.
Medium
Ruby/shell backtick execution
```bash
The example command runs pnpm dlx shadcn@latest add with a hardcoded remote tweakcn URL. That is an external package command with network-sourced input.
Low
Hardcoded URL
pnpm dlx shadcn@latest add https://tweakcn.com/r/themes/modern-minimal.json
The command fetches a remote theme JSON file from tweakcn.com. The domain matches the skill purpose, but it remains an external network dependency.
Risk Factors
⚙️ External commands (4)
🌐 Network access (1)
Audited by: codex View Audit History →
Share & cite this report
Share the versioned assessment report, neutral badge, embed card, and citations. Skillstore reports evidence without deciding whether this Skill is safe.
Copy report link
https://skillstore.io/skills/aayushbaniya2006-theme-handler/audits/8?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_reportMarkdown badge
[](https://skillstore.io/skills/aayushbaniya2006-theme-handler?utm_source=security_passport_badge)HTML badge
<a href="https://skillstore.io/skills/aayushbaniya2006-theme-handler?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/aayushbaniya2006-theme-handler/security.svg" alt="Skillstore security assessment" loading="lazy"></a>Embed card
<iframe src="https://skillstore.io/embed/skills/aayushbaniya2006-theme-handler.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>Academic citations (APA · BibTeX · CFF)
APA citation
AayushBaniya2006. (2026). theme-handler security audit report (audit version 8) [Author version unspecified]. Skillstore. https://skillstore.io/skills/aayushbaniya2006-theme-handler/audits/8BibTeX citation
@techreport{aayushbaniya2006-aayushbaniya2006-theme-handler-2026,
author = {AayushBaniya2006},
title = {theme-handler security audit report (audit version 8)},
institution = {Skillstore},
year = {2026},
number = {8},
url = {https://skillstore.io/skills/aayushbaniya2006-theme-handler/audits/8},
note = {Author version unspecified}
}CITATION.cff
cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "theme-handler security audit report (audit version 8)"
version: "unspecified"
type: report
authors:
- name: "AayushBaniya2006"
date-released: "2026-07-05"
url: "https://skillstore.io/skills/aayushbaniya2006-theme-handler/audits/8"
identifiers:
- type: other
value: "skillstore:aayushbaniya2006-theme-handler:audit:8"
description: "Skillstore immutable audit report identifier"
Skillstore Score
Why this score Evidence Confidence: High 55
Architecture
85
Maintainability
85
Content
71
Community
83
Spec Compliance
What You Can Build
Apply a Selected Theme
A developer can request a named tweakcn theme and receive the matching install workflow.
Compare Theme Options
A designer can review available theme names before choosing a visual direction.
Standardize Theme Updates
A maintainer can keep theme changes tied to a documented reference list.
Try These Prompts
Apply a Named Theme
Use theme-handler to update the app theme to Modern Minimal.
Show Theme Choices
List available tweakcn themes and help me choose a clean SaaS theme.
Confirm Before Installing
Prepare the Graphite theme update and ask me before running the install command.
Match Product Direction
Review the current visual direction, choose a matching reference theme, and ask before installation.
Best Practices
- Review the selected theme URL before running any install command.
- Confirm the project uses shadcn and pnpm before applying a theme.
- Commit or back up theme files before installing a new theme.
Avoid
- Running a theme URL that is not in the trusted reference list.
- Applying a theme without reviewing generated style changes.
- Using mutable latest package commands in unattended automation.
Frequently Asked Questions
What does this skill do?
It helps apply tweakcn themes to shadcn UI projects using a documented reference list.
Does it need internet access?
Yes. The documented workflow fetches the shadcn CLI and remote tweakcn theme files.
Can I use another package manager?
The skill documents pnpm commands. You must adapt the command manually for another package manager.
Can it choose a theme for me?
It can use the reference list to suggest themes when you describe the desired style.
Does it create a full design system?
No. It applies theme presets and does not define complete product design rules.
Is it safe to run automatically?
Review the command and theme source first because the workflow runs external package and network operations.
Developer Details
Author
AayushBaniya2006License
MIT
Skillstore revision
r1
Version notice
The author did not declare a version.
Ref
a29db30e42179ff8ed4d95c9dfba3704c22643d0
Maintenance freshness
7/18/2026
Usage
7 downloads · 293 views
File structure
📄 SKILL.md
More from AayushBaniya2006
View all📦
credits-handler
79Build Credit Purchase and Balance Flows
Credit features can fail when pricing, balances, and UI flows become inconsistent. This skill guides credit types, purchase flows, balance displays, and allocation helpers.
Coding & Development View
📦
auth-handler
79Protect Next.js Auth Routes
Authentication changes often fail when teams mix session APIs and route guards. This skill guides Claude, Codex, and Claude Code toward the project helpers for secure access control.
Security & Compliance View
📦
copywriter
78Write Clear Marketing Copy
Teams often need persuasive copy that is clear, concise, and conversion focused. This skill drafts and improves landing pages, emails, CTAs, and product messaging.
Writing & Content View
📦
ui-handler
78Build UI with Shadcn and 21st.dev
Frontend teams need consistent UI components and page sections. This skill guides Claude, Codex, and Claude Code to use Shadcn MCP and 21st.dev MCP.
Design & Creative View
📦
form-creator
78Build Validated Forms and API Routes
Teams often repeat form, validation, and CRUD route setup across features. This skill gives Claude, Codex, and Claude Code a consistent pattern for TypeScript form delivery.
Coding & Development View
Related Skills
View all📦
apple-ui-design
79Design Apple-Inspired Interfaces
by BarisSozen
Modern product teams need consistent, polished UI guidance. This skill gives Claude, Codex, and Claude Code practical Apple-inspired rules for typography, color, spacing, components, motion, and UX review.
Design & Creative View
📦
shape
81Plan UX Before Building
by pbakaus
Teams often build interfaces before clarifying user goals, states, and constraints. This skill guides discovery and produces a design brief for implementation.
Design & Creative View
📦
ui-design
80Design Distinctive UI Prototypes
by tencentcloudbase
Generic AI interfaces often lack visual direction and platform-aware detail. This skill guides Claude, Codex, and Claude Code to define design intent before building prototypes.
Design & Creative View
📦
frontend-aesthetics
79Improve Frontend Visual Design
by Barnhardt-Enterprises-Inc
Generic frontend screens often look similar and miss brand focus. This skill guides typography, color, motion, and depth choices for clearer interfaces.
Design & Creative View
📦
ui-ux-designer
79Design Accessible Product Interfaces
by sickn33
Teams often struggle to turn user needs into consistent, accessible interfaces. This skill guides research, flows, design systems, tokens, and handoff.
Design & Creative View
📦
stitch-ui-design
79Create Better Google Stitch UI Prompts
by sickn33
Google Stitch can produce generic designs when prompts lack detail. This skill provides structured prompt guidance for screens, flows, visual style, accessibility, and handoff.
Design & Creative View