Shadcn UiCAUTION
A framework for building agentic apps
Overview
A framework for building agentic apps
d31edd75948aOBSERVED · 2026-10-14What it tells the agent
The instruction file, verbatim from the audited commit — this is the text the model reads, and the surface the audit's instruction layer examines. Quoted here so you can judge it without cloning anything.
--- name: shadcn-ui description: >- Using the app's local UI adapter and Toolkit or shadcn primitives. Use when choosing or composing standard controls, implementing dialogs, menus, or forms, or changing component variants and theme tokens. scope: dev --- # shadcn/ui and Local UI Adapters Use the components already provided by the app. Read the app's design-system configuration, Toolkit provider, and local UI components before adding or changing a control. Their exports, variants, and props are the contract; do not guess from upstream examples. ## Keep imports behind the local adapter Product pages and domain components should import standard controls through the app's configured local UI alias. In the Chat starter, that is `@/components/ui/*`; its `app/components/ui/button.tsx` is a one-line re-export of `@agent-native/toolkit/ui/button`. Follow an adjacent local shim when the app needs another Toolkit primitive that is already exported there. Use the app's configured design system and provider mapping for controls passed to shared Toolkit surfaces. For shared Toolkit feature presentation, use the semantic components exposed by `@agent-native/toolkit/design-system`; keep the feature behavior in its existing controller and customize only its supported presentation seam. ## Compose existing controls - Prefer a primitive's built-in variant and size. Put page layout on a parent instead of overriding shared component appearance for one screen. - Use the app's semantic theme tokens for reusable UI, such as `bg-background`, `text-muted-foreground`, `border-border`, and `bg-primary`. Keep theme values in the app's existing CSS theme file. - Use the control that matches the choice: `Switch` for a binary setting, `Checkbox` for independent multi-select, `RadioGroup` for one choice from a short set, and `Select` or the app's combobox for a longer predefined list. - Compose cards and form fields from the primitives already available. Avoid adding explanatory copy that repeats a visible title or label; see `frontend-design` for the app's surface-density rules. - Put selectable items inside their menu or list group primitives. Keep tab triggers inside the tab list. Supply an accessible title to dialog, sheet, drawer, and alert-dialog content. - Match the trigger API to the actual local component. Toolkit wrappers may expose a different API from the upstream primitive; inspect its props before using options such as `asChild` or `render`. ## Keep controls operable Use the app's existing field components and validation pattern. Associate errors with their inputs and expose invalid state to assistive technology. Icon-only actions need an accessible name and a usable focus target. Use the icon package already installed by the app. Do not recreate menus, popovers, dialogs, or confirmations with absolute positioning and custom click-outside handlers. Never use browser `alert`, `confirm`, or `prompt`; use the app's dialog primitives. Keep overlay focus, keyboard, dismissal, and stacking behavior from the existing primitive. For small visual refinements, use layout classes and semantic tokens. Avoid raw palette overrides, arbitrary one-off values, and manual overlay `z-index` unless you are fixing a reproduced bug. Use `gap-*` for layout spacing and the app's class-merging helper when it has one. ## Related skill - **frontend-design** — Product UX, density, visual direction, and responsive behavior.
Trust audit
CAUTIONgrade B · trust 89/100 Install with care. The audit found things worth knowing before you trust its output.
| Layer | What it checks | Result |
|---|---|---|
| L0 | Provenance & inventory | WARN |
| L1 | Static analysis of the code | NA |
| L2 | Instruction surface (what it tells the agent) | PASS |
| L3 | Class-specific surface | PASS |
| L4 | Behavioural (sandbox) | SKIPPED |
What the source does
- Filesystem
- none-observed
- Network
- none-observed
- Shell
- none-observed
- Dependencies
- pinned
- Secrets in source
- none-found
Findings (5)
.agents/skills/an
.agents/skills/content-product-development
.agents/skills/design-exploration
.agents/skills/turn-into-app
.agents/skills/visual-edit
Gates applied: no_behavioural_pass.
d31edd75948afull audit observations/trust-audit/skill/builderio__shadcn-ui.json · Report an issue / request a re-scanAudit history
Every audit this skill has had.
| Date | Source | Verdict | Grade | Score | Change |
|---|---|---|---|---|---|
| 2026-10-14 | d31edd75948a | CAUTION | B | 89 | first audit |
Questions
What does the Shadcn Ui skill do?
A framework for building agentic apps
Is Shadcn Ui safe to install?
With care. The audit graded it B (89/100) and found 5 things worth knowing before you trust this skill, listed below with the exact line each was found on.
What can Shadcn Ui access on my machine?
The audit observed no filesystem, network or shell use at all in its source.
How current is this page?
The grade is for one exact copy of the source (d31edd75948a), read on 2026-10-14. The repository is watched, and a new audit runs when it changes — this is the first audit.
Add this badge to your README
Shows this page's audit result and links back to it. It updates when the audit does.
[](https://modelsatlas.com/skills/builderio/shadcn-ui/)
Not your listing, or something out of date? Claim or update your listing.