shadcn skills review: shadcn/ui skill verdict, safety and alternatives
The official shadcn skill gives coding agents your shadcn/ui project config and strict component rules. Our verdict is Conditional, 64/100, with safety grade C: good for single-app projects, empty in monorepos.
- Skill
- shadcn/ui (shadcn), skills/shadcn in shadcn-ui/ui
- Verdict
- Conditional
- Score
- 64/100
- Confidence
- Moderate
- Safety grade
- C
- Best for
- Single-app Next.js, Vite or TanStack projects already on shadcn/ui
- Poor fit
- Monorepos (Turborepo, pnpm workspaces), where the skill loads empty
- Reviewed version
- unversioned; CLI shadcn@4.21.1 (commit 295a1f1)
- Review date
- 2026-09-30
- Works in (verified)
- Claude Code (single-package projects)
- Works in (claimed)
- Codex, Cursor
- Since review
- DESIGN.md workflow and scripts/ folder added 2026-10-09
Get the skill: shadcn folder on GitHub · SKILL.md at the reviewed commit · skills.sh listing
What is the official shadcn skill?
The official shadcn skill is the shadcn/ui Agent Skill in the shadcn-ui/ui repository. It loads your project config from the shadcn CLI. Then it steers the agent to add, search, preview and compose components.
shadcn/ui is a React component library whose CLI copies components into your project as source. An Agent Skill is a SKILL.md folder an agent loads on demand; see how Agent Skills work. The official docs list five covered areas:
- Project context
- CLI commands
- Theming and customization
- Registry authoring
- MCP server
Each activation runs npx shadcn@latest info --json. It reads components.json, the project's shadcn config. It returns framework, aliases, installed components, icon library and base. The March 2026 changelog states the goal:
"shadcn/skills gives coding agents the context they need to work with your components and registry correctly."
| Fact | Value at review (2026-09-30) |
|---|---|
| Path | skills/shadcn in shadcn-ui/ui |
| Publisher | shadcn (shadcn-ui/ui) |
| Version | Unversioned skill; ships with CLI shadcn@4.21.1 |
| Licence | MIT |
| Files | 15 at commit 295a1f1: SKILL.md (19,527 bytes), 4 reference files, 6 rules files, evals.json, agents/openai.yml, 2 PNG icons |
| GitHub stars | 124,993 at review; 126,043 on 2026-10-21 |
| skills.sh installs | 85.3K at review; 115.7K on 2026-10-20 |
| CLI releases | 21 in 90 days; 67 in 12 months |
Is the shadcn skill worth installing?
Yes, the shadcn skill is worth installing, but only for single-app projects. It scores 64/100, Conditional, at Moderate confidence, with strong component rules. It loads empty in monorepos and runs unpinned shadcn@latest on every activation.
Paired Incorrect and Correct examples cover forms, composition, icons, styling and chat primitives. Updates are previewed with --dry-run and --diff. The monorepo failure (#10283, #11271) and unpinned execution (#11269) stay open, with fix PRs unmerged.
Poor fit:
- Monorepos (Turborepo, pnpm workspaces), where the skill returns nothing.
- Teams that pin the shadcn CLI or gate package execution.
- Projects on the React Aria base, which the rules do not cover.
| Criterion | Score |
|---|---|
| Effectiveness | 74 |
| Reliability | 52 |
| Safety | 55 |
| Efficiency | 62 |
| Compatibility | 58 |
| Maintainability | 62 |
| Setup friction | 72 |
| Monorepo load resilience | 30 |
| CLI reference accuracy | 68 |
| Execution and permission posture | 48 |
| Component rule correctness | 74 |
| Instruction weight vs value | 64 |
| Cost of adoption | 66 |
Compare it with the best frontend design skills, ranked.
How many tokens does the shadcn skill use?
The shadcn skill loads about 4,882 tokens of SKILL.md on every activation, plus your project JSON. References add about 31,774 tokens on demand. A settings form is estimated at 30,000 input and 3,000 output tokens.
| What | Tokens |
|---|---|
| SKILL.md, loaded each time the skill runs | 4,882 (19,527 bytes) |
| Reference files, loaded on demand | about 31,774, our estimate |
| Whole folder | 36,656 |
| Settings form from 3 to 4 components, our estimate | 30,000 input, 3,000 output |
| Settings form, including SKILL.md | 35,882 input, 3,000 output |
| SKILL.md after 2026-10-09 | 21,606 bytes, not yet counted in tokens |
The 35,882 figure adds the 4,882-token SKILL.md and about 1,000 tokens of conversation overhead to the 30,000-token task. Every activation downloads the latest CLI, and docs pages are fetched per component.
What changed since our review?
The verdict stays Conditional, 64, with grade C. Commit 2d3f1cd (#12252) landed on 2026-10-09:
- Added a DESIGN.md workflow that applies a brand spec as a design system.
- Added
design-system.md(21,621 bytes),design-system-page.md(15,790 bytes) and three asset files. - Added
scripts/showcase-coverage.mjs(1,453 bytes), the folder's first executable script. - Modified SKILL.md, now 21,606 bytes, plus customization.md and evals.json.
The script lists installed components that no example file imports. Its visible code reads local files only; we have not re-checked the whole folder since. Re-reviews appear in our re-review log.
Is the shadcn skill safe to install?
Yes, the shadcn skill is safe to install with care; it carries safety grade C. It had no scripts at review, but runs the latest shadcn CLI at load. It pre-approves every shadcn subcommand, including --overwrite (#11269).
The safety score is 55. Our review of the files at commit 295a1f1 found:
- No scripts, binaries, hooks or MCP config in the folder.
- Unpinned
npx shadcn@latest info --jsonon every activation. - Pre-approval of
add --overwrite,apply,init --forceand installs from any URL. - Text guardrails: ask before overwriting, ask which registry, verify third-party files.
- Network calls to npm, ui.shadcn.com and configured registries.
- No prompt-injection warning for fetched content.
The skills.sh directory lists three audits: Gen Agent Trust Hub Pass, Snyk Pass and Socket Warn. Hardening PR #11515 was unmerged on 2026-10-21. Learn how we grade skill safety.
What does the community report about the shadcn skill?
The community reports about the shadcn skill are mostly GitHub bug reports. Monorepo load failures and unpinned execution both have unmerged fix PRs. Tessl, a skill registry, rates its content 92%, with no eval runs.
These are the 19 dated reports we weighed: 14 negative, 2 positive and 3 neutral. Nine are strong. Evidence confidence is Moderate.
| Claim | Source | Date | Sentiment | Strength |
|---|---|---|---|---|
| Inline info --json exits 1 at monorepo root; skill loads with zero content | Issue #11271 | 2026-07 | negative | strong |
| Skill fails in monorepos because info runs without -c | Issue #10283 | 2026-04 | negative | strong |
| Two-line fix verified on pnpm Turborepo, unmerged | PR #11368 | 2026-08 | negative | strong |
| Earlier monorepo fix open and unmerged since April | PR #10287 | 2026-04 | negative | weak |
| Unpinned shadcn@latest at load; mutating commands pre-approved | Issue #11269 | 2026-07 | negative | strong |
| PR pinning the CLI and removing load-time execution unmerged | PR #11515 | 2026-08 | negative | strong |
| Pinned-CLI projects get prompts while the skill runs latest silently | Issue #12036 | 2026-09 | negative | weak |
| MCP search returns [object Promise] as add command; fix PR auto-closed | PR #11910 | 2026-09 | negative | strong |
| apply --only font deletes background and foreground variables in Next.js | Issue #12031 | 2026-09 | negative | strong |
| add --diff and --dry-run preview wrong aliases for cross-workspace files | Issue #11002 | 2026-06 | negative | strong |
| init and apply with -c fail in a Turborepo monorepo | Issue #11315 | 2026-07 | negative | weak |
| Codex user reports dev server hang and 50GB memory; unconfirmed | Issue #10754 | 2026-05 | negative | weak |
| cli.md forbids unlisted flags but omits --base and --no-reinstall | cli.md at c257f68 | 2026-09 | negative | strong |
| SKILL.md lists only radix or base and mislabels the --defaults preset | SKILL.md at c257f68 | 2026-09 | negative | weak |
| Skill content quality 92%, overall 73; no evals run | Tessl quality page | 2026-09 | positive | weak |
| Maintainer added chat-component rules and two evals | PR #11048 (merged) | 2026-06 | positive | weak |
| Keeps form and button usage correct; skips behavioural flow logic | Lamina comparison | 2026-07 | neutral | weak |
| add follows components.json and does not prompt for base | Issue #11651 | 2026-08 | neutral | weak |
| Base UI migration delegated to the skill; commenter criticises agent-first docs | Hacker News thread | 2026-07 | neutral | weak |
What are the shadcn skill's known failures?
The shadcn skill's known failures start with an empty load at a monorepo root (#11271), reported since April. Unpinned load-time execution (#11269) and a font preset bug (#12031) were still open on 2026-10-21.
Status is dated 2026-10-21 unless marked "at review".
- Empty load at a monorepo root: #10283 and #11271 open; PR #11368 unmerged; PR #10287 unmerged at review.
- Unpinned execution with blanket approval: #11269 open; PR #11515 unmerged; pinned-CLI prompts (#12036, at review).
- Contradictory flag reference: cli.md omits
--baseand--no-reinstall; unfixed at review. - Font preset bug:
apply --only fontdeletes root variables (#12031, open). - Wrong monorepo previews:
--diffshows wrong aliases across workspaces (#11002, at review). - Broken MCP search: it prints
[object Promise](#11910); fix PR auto-closed at review. - Missing React Aria rules: the rules cover only Radix and Base UI.
Which shadcn skill should you install?
Install the official shadcn skill from shadcn-ui/ui for component work in React projects. The improve skill, published by shadcn, audits codebases instead. For Vue, you use the shadcn-vue skill, which we have not evaluated.
| Skill | Publisher | Job | Install | Our verdict |
|---|---|---|---|---|
| shadcn (official) | shadcn-ui/ui | Add and compose shadcn/ui components in React projects | pnpm dlx skills add shadcn/ui |
Conditional, 64 |
| improve | shadcn (shadcn/improve) | Read-only codebase audit and improvement plans | npx skills add https://github.com/shadcn/improve --skill improve |
not evaluated |
| shadcn-vue | unovue/shadcn-vue | Same areas for the Vue port | pnpm dlx skills add unovue/shadcn-vue |
not evaluated |
| shadcndesign Agent Skills | shadcndesign (paid) | Figma design, Figma to code and Pro Blocks, in 10 skills | vendor CLI, one-time payment | not evaluated |
| mattbx/shadcn-skills; google-labs-code/stitch-skills | community; Google Labs | Alternatives named in our review | repo | not evaluated |
| Tailwind Design System verdict | wshobson | Tailwind v4 tokens and shadcn-style components | see verdict | Conditional, 68 |
| Vercel's Web Design Guidelines review | Vercel Labs | UI review, not components | see verdict | Conditional, 66 |
GitHub code search finds 3,544 exact copies of this SKILL.md, so install from shadcn/ui or shadcn-ui/ui only. See every design skill we have rated for the full ranking.
Does the shadcn skill work in Codex, Cursor and other agents?
No, not verifiably: the shadcn skill is verified only in Claude Code, in single-package projects. Codex and Cursor support is claimed by the publisher. The load-time syntax is Claude Code specific, and no Codex or Cursor run is documented.
| Agent | Status | Notes |
|---|---|---|
| Claude Code | verified | Loads in single-package projects; fails at a monorepo root (#11271) |
| Codex | claimed | agents/openai.yml adds display metadata; one unconfirmed memory-hang report (#10754) |
| Cursor | claimed | No documented run |
| Antigravity | unknown | No documented run |
See Claude Code skills ranked by verdict for other skills verified in that agent.
How do you install the shadcn skill?
You install the shadcn skill with pnpm dlx skills add shadcn/ui, or the npm, yarn or bun equivalent. Run it at a single-app project root. At a monorepo root it currently loads empty (#11271).
pnpm dlx skills add shadcn/ui
# or, as listed on skills.sh
npx skills add https://github.com/shadcn-ui/ui --skill shadcn| Agent | Skills folder | Support status |
|---|---|---|
| Claude Code | .claude/skills/ |
verified, single-package projects |
| Codex | .agents/skills/ |
claimed, no documented run |
| Cursor | .cursor/skills/, .agents/skills/ or an existing .claude/skills/ |
claimed, no documented run |
It needs Bash, Node with npx, pnpm dlx or bunx, and network access. Setup friction scores 72.
How do you install it in Claude Code without the monorepo failure?
- Open Claude Code at a single-app project root.
- Confirm that components.json exists there.
- Open the app workspace in a monorepo, never the root (#11271).
Warning: at the root, Claude Code drops the whole skill without an error. PR #11368 shows a two-line local patch. See the full Claude Code skills setup and why a skill loads empty.
How do you use the shadcn skill with Claude Code?
Use the shadcn skill with Claude Code by asking for UI, such as a settings form. The skill reads components.json and adds missing components through the CLI. Then it composes them with its form, icon and styling rules.
Three tasks fit the skill best:
- Add and compose forms, dialogs and cards with your aliases, base and icon library.
- Update installed components with
add --dry-runand--diff, keeping local edits. - Switch presets with
init --presetorapply --only.
Chat UI primitives, custom registries and the DESIGN.md workflow are claimed by the publisher but not shown in any published test.
Test it yourself: open Claude Code at a CLI-generated --monorepo root and at a single-app project. Check whether the skill loads and its rules show up in form code.
Should you use the shadcn skill or the shadcn MCP server?
Use both where you can: the shadcn skill gives project context and composition rules. The shadcn MCP server searches, browses and installs registry items. The skill's MCP search returned [object Promise] at review (#11910).
| Aspect | shadcn skill | shadcn MCP server |
|---|---|---|
| Gives | Project context and composition rules | Registry search, browsing and installs |
| Runs | Loads on each activation | Runs as a server |
| Open defect | MCP search guidance returned [object Promise] (#11910) | none in our evidence |
The general trade-off is covered in Agent Skills vs MCP servers.
Common questions
Can the shadcn skill change themes?
Yes, through presets and apply --only. The apply --only font path has an open bug (#12031).
Does the shadcn skill work in a monorepo?
No, not at the root. The load-time probe exits 1 and the skill loads empty (#11271, open).
Is the shadcn skill free?
Yes. It ships in the MIT-licensed shadcn-ui/ui repository.
Is there a shadcn plugin for Claude Code?
No. The folder has no plugin manifest, and Anthropic's official marketplace listed no shadcn plugin on 2026-10-20.
Where is the shadcn skill on GitHub?
It lives at skills/shadcn in shadcn-ui/ui. Its SKILL.md follows the SKILL.md format.
Does the shadcn skill work in Antigravity?
Unknown. We found no documented run in Antigravity.