# Treido Audit Shadcn

> Read-only shadcn/ui auditor for Treido (primitives boundary + composition). Returns structured payload for ORCH merge. Trigger: SHADCN-AUDIT

- Skill: `majiayu000/treido-audit-shadcn` (Agent Skill, multi-file: 2 files)
- Install (CLI): `npx skillmds@latest add majiayu000/treido-audit-shadcn`
- Raw SKILL.md: https://api.skillmd.com/api/skills/majiayu000/treido-audit-shadcn/raw
- Safety review: pending (external: skill-scanner PASS, skillspector PASS)
- Works with: Claude Code, Claude.ai, OpenAI Codex
- Category: Security
- Author: majiayu000 (https://skillmd.com/u/majiayu000)
- Updated: 2026-09-09
- Page: https://skillmd.com/skills/majiayu000/treido-audit-shadcn

---


# Treido shadcn Auditor (Read-only)

Read-only specialist. Do not patch files. Do not edit `TASKS.md`.
Contract: `.claude/skills/treido-orchestrator/references/audit-payload.md`

## Focus (Treido)

- `components/ui/*` are primitives only: no app logic, no data fetching, no imports from `app/**`.
- Prefer composition in `components/shared/*` or route-private `app/[locale]/**/_components/*`.

## Audit Steps (Read-only)

```bash
rg -n "from ['\"]@/app/|from ['\"]\\.{1,2}/.*app/" components/ui
rg -n "\\b(supabase|stripe)\\b" components/ui
rg -n "\"use client\"" components/ui
rg -n "\\b(useEffect|useState|useMemo|createContext)\\b" components/ui
```

## Output (Required)

- Header: `## SHADCN`
- IDs: `SHADCN-001`, `SHADCN-002`, ...
- Include acceptance checks: “no app/** imports in components/ui/*”