Skills DirectorySkills Directory
SkillsLearnSecurityCategoriesDocsCommunityBlog
Sign InSubmit Skill
Skills Directory

Security-tested agent skills for Claude, coding agents, and AI workflows.

Directory

  • Browse Skills
  • All Skills A–Z
  • Claude Skills
  • Claude Code Skills
  • Agent Skills
  • Categories
  • Authors
  • Submit a Skill

Learn

  • Learn Hub
  • Install Claude Skills
  • Write SKILL.md
  • Skills vs MCP
  • Directories Compared

Security

  • Security
  • Methodology
  • Secure Claude Skills
  • Security Badges

Company

  • About
  • Community
  • Blog
  • API Docs
  • Advertise

2026 Skills Directory. All rights reserved.

ProTermsPrivacyRefunds
Back to skills

Rialto

ASecurity

Use when building UI with the Rialto design system, importing from "rialto" or "@mattbutlerengineering/rialto", choosing components, applying design tokens, composing layouts, or authoring new Rialto components. Triggers on mentions of "Rialto", "component library", "design system", "UI component", or imports from rialto.

2 stars
0 votes
0 copies
0 views
Added 9/22/2026
developmentgobashreactspring

Security Analysis

A100/100

Scanned 9/22/2026

Install to Claude Code

$npx -y skills add mattbutlerengineering/mattbutlerengineering --skill rialto --agent claude-code

Installs into .claude/skills of the current project.

Are you the author of Rialto?

Add the live security badge to your README — it updates automatically with every re-scan.

Security grade badge for Rialto
[![Security: A — Skills Directory](https://www.skillsdirectory.com/api/skills/mattbutlerengineering-rialto/badge)](https://www.skillsdirectory.com/skills/mattbutlerengineering-rialto)

More formats (shields.io, HTML) on the badges page.

Download with Pro
Files
SKILL.md
---
name: rialto
description: Use when building UI with the Rialto design system, importing from "rialto" or "@mattbutlerengineering/rialto", choosing components, applying design tokens, composing layouts, or authoring new Rialto components. Triggers on mentions of "Rialto", "component library", "design system", "UI component", or imports from rialto.
---

# Rialto Design System

Rialto is a 62-component React design system with warm-neutral aluminum surfaces, gold accent, spring-physics motion, and CSS token architecture. Import everything from the barrel:

```tsx
import { Button, Input, Card, Stack, Text } from "rialto";
import "rialto/tokens";
```

## Required Providers

```tsx
<RialtoProvider vibe="default" theme="system">
  <ToastProvider>
    <App />
  </ToastProvider>
</RialtoProvider>
```

- `RialtoProvider` — device context, theming, vibe token overrides
- `ToastProvider` — required before calling `useToast()`

## 6 Cardinal Rules

1. **Tokens only** — Never hardcode colors, spacing, radii, or easing. Always `var(--rialto-*)`.
2. **Gold is surgical** — `--rialto-accent` only for focus rings, active/selected states, primary button fills. Never decorative.
3. **forwardRef always** — Every component uses `React.forwardRef`. New components must too.
4. **Respect reduced motion** — Check `useReducedMotion()` from Framer Motion. Skip animation when true.
5. **Logical properties** — Use `margin-inline-start`, `padding-inline-end`, `inset-inline-start` — never `left`/`right`.
6. **Barrel imports** — Always `import { X } from "rialto"`. Never `import X from "rialto/components/X"`.

## Component Selection

> Full details: [decision-trees.md](references/decision-trees.md)

| Need         | Start Here                                                                                    |
| ------------ | --------------------------------------------------------------------------------------------- |
| Form input   | Decision tree → Input, TextArea, NumberInput, Select, Toggle, etc.                            |
| Overlay      | Dialog, ConfirmDialog, Drawer, Popover, Tooltip, HoverCard                                    |
| Feedback     | Priority routing: P1 ConfirmDialog → P2 Dialog → P3 Banner → P4 Alert → P5 Toast → P6 Tooltip |
| Navigation   | Tabs, Breadcrumb, Steps, Pagination, Sidebar, Navbar                                          |
| Data display | Table, Card, Badge, Tag, Stat, DataList, Timeline, Tree                                       |
| Layout       | Stack, Divider, Collapsible, Accordion, ScrollArea                                            |

## Composition

> Full details: [composition-patterns.md](references/composition-patterns.md)

| Pattern             | Components                                 |
| ------------------- | ------------------------------------------ |
| Data table page     | Table + Pagination + Stack                 |
| Login form          | Card + Stack + Input + Button              |
| Settings panel      | Drawer + Stack + Toggle + Select + Divider |
| Confirmation flow   | ConfirmDialog (variant="danger")           |
| Toast notifications | ToastProvider + useToast() hook            |

## Tokens

> Full details: [token-enforcement.md](references/token-enforcement.md)

| Category | Prefix                                 | Example                     |
| -------- | -------------------------------------- | --------------------------- |
| Surfaces | `--rialto-surface-*`                   | `--rialto-surface-elevated` |
| Text     | `--rialto-text-*`                      | `--rialto-text-secondary`   |
| Borders  | `--rialto-border*`                     | `--rialto-border-strong`    |
| Accent   | `--rialto-accent*`                     | `--rialto-accent-muted`     |
| Semantic | `--rialto-error*`, `--rialto-success*` | `--rialto-error-muted`      |
| Shadows  | `--rialto-shadow-*`                    | `--rialto-shadow-elevated`  |
| Radius   | `--rialto-radius-*`                    | `--rialto-radius-soft`      |
| Spacing  | `--rialto-space-*`                     | `--rialto-space-lg`         |
| Easing   | `--rialto-ease-*`                      | `--rialto-ease-precision`   |

## Icons

> Full details: [icon-vocabulary.md](references/icon-vocabulary.md)

Use Lucide React icons. Import directly or use `getIcon(concept)` for data-driven UIs. Sizes: 14px (sm buttons), 16px (md buttons), 20px (standalone), 32-48px (hero/empty state).

## Authoring New Components

> Full details: [authoring-guide.md](references/authoring-guide.md)

File structure: `src/components/Name/Name.tsx` + `Name.module.css`. Extend native HTML props, use `forwardRef`, CSS Modules with token variables, all states (hover/active/focus/disabled), WCAG AA contrast.

## Common Mistakes

> Full details: [common-mistakes.md](references/common-mistakes.md)

- Hardcoding `#hex` colors instead of tokens
- Importing from `"rialto/components/Button"` instead of `"rialto"`
- Using gold accent for decorative backgrounds
- Calling `useToast()` without `<ToastProvider>`
- Using CSS transitions for interactive animations (use Framer Motion)
- Skipping `useReducedMotion()` check before animating

## Auto-Generated Reference

For complete per-component props, slots, and character limits, generate the reference locally — it is not committed and no automated pipeline produces it:

```bash
pnpm --filter @mbe/rialto-plugin build   # writes generated/component-reference.md
```

Attribution

mattbutlerengineeringmattbutlerengineering
View sourceMore from mattbutlerengineering →
SSkills DirectorySkills Directory

Ship a skill? Prove it's safe.

Free 120-pattern security scan, letter grade, and an embeddable README badge.

Submit a skill

Is this your skill, or is something wrong with this listing? Request removal or report an issue. Author removals are honored within 72 hours.

Comments (0)

No comments yet. Be the first to comment!

SSkills DirectorySkills Directory

Ship a skill? Prove it's safe.

Free 120-pattern security scan, letter grade, and an embeddable README badge.

Submit a skill

Related Skills

Browser Extension Developer

Use this skill when developing or maintaining browser extension code in the `browser/` directory, including Chrome/Firefox/Edge compatibility, content scripts, background scripts, or i18n updates.

284722 votes

Seo Optimizer

SEO optimization with keyword analysis, readability assessment, technical validation, content quality. Use for search rankings, blog posts, content audits, or encountering keyword density, readability scores, meta tags, schema markup errors.

2192 votes

Google Official Seo Guide

Official Google SEO guide covering search optimization, best practices, Search Console, crawling, indexing, and improving website search visibility based on official Google documentation

1862 votes

Tanstack Start

Build a full-stack TanStack Start app on Cloudflare Workers from scratch — SSR, file-based routing, server functions, D1+Drizzle, better-auth, Tailwind v4+shadcn/ui. Use whenever the user mentions TanStack Start, asks to scaffold a full-stack Cloudflare app with SSR, wants an SSR dashboard, or asks for a React 19 + Cloudflare Workers app with file-based routing and server functions — even if they don't name TanStack Start specifically. No template repo — Claude generates every file fresh per ...

9881 votes

Pentest

PTES-aligned adversarial security audit for backend, frontend, and mobile applications. Produces a CVSS-scored Hacker Report with verified PoCs and phased remediation.

5491 votes
View all in development →