📦

shadcn

Name: shadcn
Author: shadcn-ui

内容修订 r1 安全 🌐 网络访问📁 文件系统访问⚙️ 外部命令

Build and Maintain shadcn Interfaces

Shadcn projects require precise component, registry, preset, and styling decisions. This skill provides project-aware workflows for building and updating consistent interfaces.

支持: Claude Codex Code(CC)

📊 72 合格

使用我的智能体安装

将此请求复制给你的智能体，其中包含权威 Skill 页面和清单。

智能体请求

Review the Skillstore skill "shadcn" from https://skillstore.io/skills/shadcn-ui-shadcn.md and its manifest at https://skillstore.io/api/skills/shadcn-ui-shadcn/manifest. Verify the artifact. You may proceed after verification, subject to the environment's own policy.

你的智能体仍应展示其计划，并按安全策略请求必要确认。

Agent 可读资源

当 AI Agent、爬虫或脚本需要干净上下文，而不是读取完整页面时，请使用这些链接。

Markdown 详情 GET /skills/shadcn-ui-shadcn.md 已签名 manifest GET /api/skills/shadcn-ui-shadcn/manifest 已签名 lockfile GET /api/skills/shadcn-ui-shadcn/lockfile

测试它

正在使用“shadcn”。 Add a settings dialog to this project.

预期结果:

Project context identifies the framework, aliases, base library, and package manager.
The dialog is previewed before installation.
The final composition includes accessible title and description elements.

正在使用“shadcn”。 Update the locally modified button component.

预期结果:

The update report separates upstream changes from local modifications.
Compatible changes are merged without an unconditional overwrite.
Remaining conflicts are listed for user review.

正在使用“shadcn”。 Switch only the project theme preset.

预期结果:

The preset is inspected first, then only the theme is applied while components and fonts remain unchanged.

安全审计

安全

v1 • 2026/8/9 打开版本化报告

Review confirmed one high-severity risk: the skill automatically executes an unpinned `shadcn@latest` package during context injection. The other 131 findings are documentation syntax, example URLs, accessibility text, or relative links without dangerous behavior.

已扫描文件

2,474

分析行数

复核项

已忽略误报

能力复核项 (1)

这些是真实的本地能力，对此技能可能是预期行为，因此需要复核，但不会按已确认恶意行为计分。

高

SKILL.md:17-18

Ruby/shell backtick execution

!`npx shadcn@latest info --json`

The dynamic context directive executes `npx shadcn@latest info --json` when the skill loads. Using a moving package tag executes remotely supplied code without version pinning.

风险因素

🌐 网络访问 (14)

cli.md:107 cli.md:174 cli.md:175 cli.md:178 cli.md:179 customization.md:80 mcp.md:92 mcp.md:94 registry.md:29 registry.md:31 registry.md:62 registry.md:64 registry.md:229 SKILL.md:265

📁 文件系统访问 (7)

cli.md:175 cli.md:179 mcp.md:22 mcp.md:22 rules/styling.md:3 rules/styling.md:60 rules/styling.md:105

⚙️ 外部命令 (50)

审计者: codex

分享与引用此报告

分享版本化评估报告、中性徽章、嵌入卡片和引用。Skillstore 只报告证据，不判断该 Skill 是否安全。

打开版本化报告

复制报告链接

https://skillstore.io/skills/shadcn-ui-shadcn/audits/1?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_report

Markdown 徽章

[![Skillstore security assessment](https://skillstore.io/badges/skills/shadcn-ui-shadcn/security.svg)](https://skillstore.io/skills/shadcn-ui-shadcn?utm_source=security_passport_badge)

HTML 徽章

<a href="https://skillstore.io/skills/shadcn-ui-shadcn?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/shadcn-ui-shadcn/security.svg" alt="Skillstore security assessment" loading="lazy"></a>

嵌入卡片

<iframe src="https://skillstore.io/embed/skills/shadcn-ui-shadcn.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>

学术引用 (APA · BibTeX · CFF)

APA 引用

shadcn-ui. (2026). shadcn security audit report (audit version 1) [Author version unspecified]. Skillstore. https://skillstore.io/skills/shadcn-ui-shadcn/audits/1

BibTeX 引用

@techreport{shadcn-ui-shadcn-ui-shadcn-2026,
  author = {shadcn-ui},
  title = {shadcn security audit report (audit version 1)},
  institution = {Skillstore},
  year = {2026},
  number = {1},
  url = {https://skillstore.io/skills/shadcn-ui-shadcn/audits/1},
  note = {Author version unspecified}
}

CITATION.cff

cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "shadcn security audit report (audit version 1)"
version: "unspecified"
type: report
authors:
  - name: "shadcn-ui"
date-released: "2026-08-09"
url: "https://skillstore.io/skills/shadcn-ui-shadcn/audits/1"
identifiers:
  - type: other
    value: "skillstore:shadcn-ui-shadcn:audit:1"
    description: "Skillstore immutable audit report identifier"

比较变体

2 个可安装变体

每位作者的技能都保持为独立的可安装项。推荐变体按 Skillstore 证据排序。

为什么此变体排名第一

Skillstore 评分最高

作者 / 来源 Skillstore 评分证据置信度 Skillstore 使用量已更新

shadcn 推荐

shadcn-shadcn

Skillstore 评分 73

证据置信度高

Skillstore 使用量 16

已更新

2026-09-09

shadcn-ui 当前

shadcn-ui-shadcn

Skillstore 评分 72

证据置信度中

Skillstore 使用量 3

已更新

2026-09-09

Skillstore 评分

评分依据证据置信度: 中

架构

可维护性

内容

社区

规范符合性

你能构建什么

Build a React interface

Select and compose shadcn components that match the current project configuration.

Maintain a component library

Preview upstream changes and preserve local modifications during component updates.

Publish a registry

Structure, build, and verify reusable registry items for downstream projects.

试试这些提示

Add a component

Inspect this shadcn project, add a dialog component, and show which files changed.

Build an accessible form

Create an accessible account form using installed shadcn components and the project styling conventions.

Update without losing changes

Compare the installed button with upstream, preserve local changes, and apply only compatible updates.

Design a project registry

Review this registry structure, correct invalid includes and dependencies, then define a verification workflow.

最佳实践

Inspect project context before selecting components or package commands.
Use dry runs and diffs before updating existing source files.
Review every third-party registry item before installation.

避免

Do not overwrite locally modified components without explicit approval.
Do not guess a registry when the user has not selected one.
Do not hardcode aliases, icon libraries, raw colors, or framework assumptions.

常见问题

Does this skill install shadcn components?

It guides and runs supported shadcn CLI workflows when tool permissions and project context allow.

Can it update modified components?

Yes. It uses dry runs and file diffs to preserve local changes.

Does it support community registries?

Yes. Registry selection must be explicit, and added files should be reviewed.

Can it switch presets?

Yes. It supports overwrite, partial, merge, and configuration-only approaches after user selection.

Does it support Base UI and Radix?

Yes. It reads project context and adapts component patterns to the configured base.

Will it validate the finished interface?

It applies documented rules, but project tests, linting, and visual checks remain necessary.

开发者详情

作者

shadcn-ui

许可证

MIT

Skillstore 修订

版本提示

作者未声明版本。

仓库

https://github.com/shadcn-ui/ui/tree/6261bd89f72d794aea491482cc2acfd8dc3d63e2/skills/shadcn

引用

183f7af6c7e0d859be6c0e71dee4f4510c514605

维护新鲜度

2026/8/10

使用量

0 次下载 · 0 次浏览

文件结构

📁 agents/

📄 openai.yml

📁 assets/

📄 shadcn-small.png

📄 shadcn.png

📄 cli.md

📄 customization.md

📁 evals/

📄 evals.json

📄 mcp.md

📄 registry.md

📁 rules/

📄 base-vs-radix.md

📄 chat.md

📄 composition.md

📄 forms.md

📄 icons.md

优化 Next.js 性能

由 Atman36

Next.js 应用可能会因为大型 bundle、薄弱的缓存和未优化的媒体而变慢。此技能会指导 Claude、Codex 和 Claude Code 对生产应用进行有针对性的性能改进。

编码与开发查看

shadcn

使用我的智能体安装

Agent 可读资源

测试它

安全审计

风险因素

复制报告链接

Markdown 徽章

HTML 徽章

嵌入卡片

APA 引用

BibTeX 引用

CITATION.cff

比较变体

Skillstore 评分

你能构建什么

Build a React interface

Maintain a component library

Publish a registry

试试这些提示

最佳实践

避免

常见问题

开发者详情

shadcn-ui 的更多技能

migrate-radix-to-base

相关技能

styling-with-shadcn

senior-fullstack

vercel-react-view-transitions

react-dev

senior-frontend

nextjs-optimization