Borrowing it
Nothing to install: this file belongs to brianmontanaweb/agentic-design-system. Take a copy, put it at the same path in your own repository, and replace the rules that are about this project with yours.
curl -O https://raw.githubusercontent.com/brianmontanaweb/agentic-design-system/main/.claude/skills/update-component/SKILL.mdgit clone --depth 1 https://github.com/brianmontanaweb/agentic-design-systemWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/brianmontanaweb/agentic-design-system/update-component)<a href="https://agentmods.dev/skills/brianmontanaweb/agentic-design-system/update-component"><img src="https://agentmods.dev/badge/skills/brianmontanaweb/agentic-design-system/update-component/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/brianmontanaweb/agentic-design-system/update-component"><img src="https://agentmods.dev/badge/skills/brianmontanaweb/agentic-design-system/update-component.svg" alt="Reviewed on agentmods" width="80" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00068 | $0.02330 |
| Opus 5.5 | $0.00027 | $0.00932 |
| Sonnet 5.5 | $0.00014 | $0.00466 |
| Haiku 4.5 | $0.00007 | $0.00233 |
Grade A, and why
update-component scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 2mo ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 197 lines — stays where its author put it; the contents beside it link to each section on GitHub.
Update Component
Audit and update an existing component given $ARGUMENTS in the format <ComponentName>.
Gotchas
These defuse the most common mistakes before you encounter them:
- Read
references/violation-criteria.mdonce in Step 2 — it stays in context for Steps 4–6; do not re-read it. - The underlying conventions live in
.claude/skills/shared/references/—conventions.md(imports, tokens, layout) andaria-patterns.md(required ARIA per component type) are the single source of truth shared with theadd-componentskills;violation-criteria.mdtells you how to flag deviations from them. - Figma is optional — if the user skips the link, mark "Figma: skipped" in the plan and proceed immediately; never block on it.
color.on.accentis not a hex violation — it is a Chakra semantic token name; do not flag it as a hardcoded color. Do add it to the spec doc'stokens.colorsarray if it appears in source style props — it is a real token reference that belongs in the tokens completeness inventory.import Reactdefault import — flag it in any file (source or story) where noReact.*type annotations (React.ReactElement,React.MouseEvent,React.ReactNode) appear; do not flag it if any such annotations are present. Actively scan before deciding.- SC 1.4.1 attaches to missing visually-hidden text, not to a missing
aria-hidden— For components likeAgentStatusthat use a colored dot or badge to convey state, the SC 1.4.1 violation is triggered by the absence of visually-hidden text that names the current state. A decorative dot missingaria-hidden="true"is a separate ARIA concern — flag it as a general ARIA violation and do NOT cite SC 1.4.1 for it. - Fixing SC 1.4.1: use
<VisuallyHidden>from@chakra-ui/react— When executing the fix for a SC 1.4.1 violation in a status-indicator component, add<VisuallyHidden>{displayLabel}</VisuallyHidden>inside the container alongside (not replacing) the visible indicator. The visible<Badge>or dot remains; the<VisuallyHidden>provides the text alternative for screen readers. A visible label alone does NOT satisfy this — the grader looks forsrOnly,VisuallyHidden,visuallyHidden,sr-only,clip-path, orclip:in the source. - Timing violations are
ms/s, notpx— scan everytransitionandanimationprop for literal values like'all 100ms'or'1.2s ease-in-out'; these are token violations even though they contain no#. - Tokens field completeness requires active scanning — extract every token string from the source style objects and compare against the spec doc's
tokensarrays; do not rely on memory or assume the list is complete. 'aria-label'and other string-literal-key props count — when checking the spec doc props table, include every prop in theexport interfaceblock, even props written as'aria-label'?: string.- Per-component animation usage is not itself a violation —
prefers-reduced-motionis suppressed globally inAgenticProvider; flag it only if that theme-level override is absent. npm run test:visualis only needed for visual changes — skip it for spec doc edits or story label-only changes.
What ships with it
23 files beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.
- evals/eval-rubric.md 10 KB
- evals/evals.json 22 KB
- evals/scripts/grade-agentstatus.sh 4.1 KB runs code
- evals/scripts/grade-button.sh 2.5 KB runs code
- evals/scripts/grade-toolcallcard.sh 3.2 KB runs code
- evals/scripts/setup-agentstatus.sh 341 B runs code
- evals/scripts/setup-button.sh 307 B runs code
- evals/scripts/setup-clean-component.sh 4.0 KB runs code
- evals/scripts/setup-toolcallcard.sh 347 B runs code
- evals/scripts/teardown-agentstatus.sh 228 B runs code
- evals/scripts/teardown-button.sh 199 B runs code
- evals/scripts/teardown-clean-component.sh 189 B runs code
- evals/scripts/teardown-toolcallcard.sh 233 B runs code
- references/fixtures/AgentStatus/doc.ts 1.1 KB runs code
- references/fixtures/AgentStatus/source.tsx 1.3 KB
- references/fixtures/AgentStatus/story.tsx 851 B
- references/fixtures/Button/doc.ts 5.4 KB runs code
- references/fixtures/Button/source.tsx 5.0 KB
- references/fixtures/Button/story.tsx 3.3 KB
- references/fixtures/ToolCallCard/doc.ts 1.5 KB runs code
- references/fixtures/ToolCallCard/source.tsx 3.5 KB
- references/fixtures/ToolCallCard/story.tsx 1.2 KB
- references/violation-criteria.md 4.9 KB
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 2mo ago First seen · 197 lines · 68 tokens per session scan A 9096d64d48e9
update-component is a skill published in the GitHub repository brianmontanaweb/agentic-design-system (3 stars, last pushed 2mo ago), licensed MIT. It adds 68 tokens to every session and 2,330 once invoked, about $0.0003 per session on Opus 5.5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.
Other skills, from other repositories
shadcn
Manages shadcn components and projects — adding, searching, fixing, debugging, styling, and composing UI. Provides project context, component docs, and usage examples. Applies when working with shadcn/ui, component registries, presets, --preset codes, or any project with a components.json file. Also triggers for…
design-component
Design a UI component spec to the house quality bar (anatomy, variants, sizes, the 8 states, token mapping, and accessibility). Use when the user wants to design or document a component (button, input, tabs, toast, combobox, date picker, modal, etc.) at the spec level before or alongside code. For generating framework…
design-screen
Design or build a page, screen, landing page, website, app or UI from a request - the whole job, end to end. Use this for "design a landing page", "build a settings screen", "make me a website", "design the onboarding", "ออกแบบหน้าเว็บ", "ทำหน้า landing", "ออกแบบ UI", "ทำแอป". It runs the pipeline no single skill…
critique
Adversarial design critique of the current work. Render it, look at it, and argue for rejection. Run after the gates are green, never instead of them.
scaffold-project
Scaffold a new design-product project that matches the recommended Claude Code layout (the reference structure). Use when starting a fresh product/app that will be built with this design system.
image-to-code
Turn a reference image, screenshot, or mockup into token-driven, accessible code. Infer the design system from the reference (palette, type scale, spacing, radius, layout archetype), map it to the 3-tier tokens, rebuild it, then verify with the kit's gates. Use when the user provides a design/screenshot and wants…