Agent skill

Workos Widgets

by usenotra in usenotra/notra

A skill your agent uses when the user is implementing, embedding, or debugging a WorkOS Widget — specifically the User Management, User Profile, Admin Portal SSO Connection, or Admin Portal Domain…

AGPL-3.0Auto-check passedAI & LLM Engineering

Install Workos Widgets

skills CLI
$ npx skills add usenotra/notra --skill workos-widgets -a claude-code

Project install by default; add -g for ~/.claude/skills/.

GitHub CLI
$ gh skill install usenotra/notra workos-widgets --agent claude-code

Project scope by default; add --scope user for a personal install. Needs GitHub CLI 2.90.0 or later (public preview).

Manual copy
$ git clone --depth 1 https://github.com/usenotra/notra.git skills-src && mkdir -p .claude/skills && cp -r skills-src/.agents/skills/workos-widgets .claude/skills/workos-widgets && rm -rf skills-src

Use ~/.claude/skills/ instead of .claude/skills for a personal install. The folder must contain SKILL.md.

Claude Code skills documentation · loads skills from .claude/skills/

Facts

Skill name
workos-widgets
GitHub stars
256
Token cost
~2k tokens
SKILL.md length
719 words
Files
25 (incl. references)
Skills in repo
17
Repo updated
First seen
Licence
AGPL-3.0

At a glance

A skill your agent uses when the user is implementing, embedding, or debugging a WorkOS Widget — specifically the User Management, User Profile, Admin Portal SSO Connection, or Admin Portal Domain…

  • Works in 8 steps: Identify widget target from the user… → Scan project files in this order → Detect stack, data-layer style, styling,… → …
  • The user is implementing
  • SKILL.md covers Workflow Overview, Canonical Inputs, Detection and Ambiguity Protocol and Reference Loading Map, plus 4 more sections
  • Runs JavaScript and TypeScript scripts from its folder; calls npx and node

What it does

Workos Widgets is an agent skill from usenotra/notra. Use when the user is implementing, embedding, or debugging a WorkOS Widget — specifically the User Management, User Profile, Admin Portal SSO Connection, or Admin Portal Domain Verification widgets. Handles the full stack — detecting the frontend (Next.js, React, React Router, TanStack Start, Vite, SvelteKit), generating access tokens via the backend SDK in use (Node, Python, Go, Ruby, PHP, Java, .NET), and wiring up the widget component correctly per the bundled OpenAPI spec. Also use when code imports from…

Its SKILL.md is about 2k tokens, which your agent loads only when the skill is triggered. The skill folder holds 26 other files, including reference files (for example `references/detection.md`, `references/fetching-apis.md` and `references/framework-go.md`).

It sits in AI & LLM Engineering, covering Authentication, React components and OpenAPI specifications. It works with WorkOS, OpenAPI, Vite and Next.js. The repository describes itself as: Notra is a modern GEO tool that asks ChatGPT, Claude and Gemini the questions your buyers ask. See if you show up, who shows up instead and how to fix it. The licence is AGPL-3.0.

When your agent uses it

  • The user is implementing
  • Debugging a WorkOS Widget — specifically the User Management
  • Admin Portal SSO Connection
  • Admin Portal Domain Verification widgets

Example prompts

  • “/workos-widgets”

Requirements

  • Node.js

Workflow steps

8 steps, taken from the first numbered list in SKILL.md.

  1. Identify widget target from the user request (user-management, user-profile, admin-portal-sso-connection, admin-portal-domain-verification).
  2. Scan project files in this order
  3. Detect stack, data-layer style, styling, component system, and package manager using references/detection.md.
  4. Check for AuthKit/WorkOS presence
  5. If detection is ambiguous or conflicting, ask one focused question, then continue.
  6. Load only the relevant reference files for the detected stack and widget.
  7. Implement integration based on stack shape
  8. Validate routing/wiring, imports, and token/API usage before finishing.

What it can do on your machine

Read from SKILL.md and the folder at commit e6483cd. It shows what the files ask for, not the result of running them.

  • Tool permissions

    Pre-approves nothing: there is no allowed-tools line, so your agent's usual permission prompts apply.

    From allowed-tools in the SKILL.md frontmatter.

  • Runs code

    Ships script files (JavaScript and TypeScript, from the files we listed), which the agent can run.

    Shell commands in SKILL.md call:

    • npx
    • node

    From the folder's file list and the shell code blocks in SKILL.md.

  • Network

    No URLs in SKILL.md. Its commands use npx, which can reach the network depending on how they are called.

    From URLs in SKILL.md, links to its own repository left out.

  • Credentials

    Names no API keys, tokens, secrets or passwords.

    From names ending in _API_KEY, _TOKEN, _SECRET, _KEY or _PASSWORD in SKILL.md.

Context cost

Workos Widgets loads about 2k tokens when it runs, and up to ~101k if it reads all its reference files. Until then it costs about 153 tokens; SKILL.md has 719 words of instructions outside code blocks.

Always · name and description, kept in context so the agent knows when to use it
~153
When it runs · the whole SKILL.md, loaded when a task matches
~2k
With references · SKILL.md plus every file in references/, read only if the agent opens them
~101k

Estimates: characters ÷ 4, the usual rule of thumb; real counts depend on the model's tokenizer. Scripts and assets cost tokens only if the agent reads them.

Safety

Auto-check passed

The automated check found no risky patterns in SKILL.md.

Automated static check — not a guarantee. Review scripts before installing. It scans the text of SKILL.md for risky patterns (piping downloads into a shell, reading credential files, hidden Unicode, destructive commands); files beside SKILL.md are not scanned.

SKILL.md

The full file from usenotra/notra at commit e6483cd, republished under its AGPL-3.0 licence (© usenotra). 719 words, ~1,990 tokens.

Download SKILL.mdSave it as .claude/skills/workos-widgets/SKILL.md (or your agent's skills folder). This skill also uses 24 other files; get the full folder from GitHub.
name
workos-widgets
description
Use when the user is implementing, embedding, or debugging a WorkOS Widget — specifically the User Management, User Profile, Admin Portal SSO Connection, or Admin Portal Domain Verification widgets. Handles the full stack — detecting the frontend (Next.js, React, React Router, TanStack Start, Vite, SvelteKit), generating access tokens via the backend SDK in use (Node, Python, Go, Ruby, PHP, Java, .NET), and wiring up the widget component correctly per the bundled OpenAPI spec. Also use when code imports from @workos-inc/widgets or the user pastes <UserManagement /> or <UserProfile /> JSX.

WorkOS Widgets

Workflow Overview

  1. Identify widget target from the user request (user-management, user-profile, admin-portal-sso-connection, admin-portal-domain-verification).
  2. Scan project files in this order:
    • package/dependency manifests
    • framework/router entrypoints
    • auth/token utilities
    • styling/component patterns
  3. Detect stack, data-layer style, styling, component system, and package manager using references/detection.md.
  4. Check for AuthKit/WorkOS presence:
    • if detected, continue;
    • if not detected, ask the user to run WORKOS_MODE=agent npx workos@latest install. Wait for confirmation, then continue.
  5. If detection is ambiguous or conflicting, ask one focused question, then continue.
  6. Load only the relevant reference files for the detected stack and widget.
  7. Implement integration based on stack shape:
    • frontend route/page + widget component when widget UI lives in the same app
    • token endpoint/service + client integration surface when backend-first/multi-app architecture is detected
  8. Validate routing/wiring, imports, and token/API usage before finishing.

Canonical Inputs

Accept these inputs from the user request when available:

  • widget type (or infer from request intent)
  • optional component path
  • optional page/route path
  • optional token endpoint/service preference
  • optional constraints (for example: avoid broad refactors)

When input is missing, infer from existing project conventions and detected stack.

Detection and Ambiguity Protocol

  • Apply detection heuristics from references/detection.md.
  • Explore before asking. Ask only when ambiguity remains after checking manifests and route/auth entrypoints.
  • Ask a single concrete question that resolves one decision.
  • Default to the strongest detected ownership signals when no user response is available.
  • When installs are required, use the package manager detected from project files/lockfiles.

Reference Loading Map

Always load these core references:

For React/TypeScript stacks (Next.js, React Router, TanStack Router, TanStack Start, Vite), also load:

Load stack-specific reference guidance:

Then load exactly one widget reference:

Global Widget Guidance

  • Implement widget operations using endpoint paths/methods from references/fetching-apis.md. When building request bodies or parsing responses, query the OpenAPI spec for the relevant widget's schemas:
    bash
    node references/scripts/query-spec.cjs --widget <widget-name>
    Use --list to see available widget groups.
  • Keep loading, empty, and error states explicit and user-visible.
  • Keep mutation outcomes visible and refresh/reload affected data after successful changes.
  • Align table/list/action UI with existing project conventions.
  • Keep behavior resilient for partial/optional data and avoid brittle UI assumptions.
Show full SKILL.md (330 more words)Show less

Core Guidelines

  • Reuse existing domain types from the host project and OpenAPI schemas; avoid duplicating model definitions.
  • Build widget requests using references/fetching-apis.md for paths, methods, and schema queries.
  • Use direct fetch/HTTP calls (or equivalent server HTTP client) for endpoint calls.
  • Implement a consistent authorization layer for widget requests, including elevated-token handling for sensitive endpoints when required.
  • If the app already uses React Query or SWR, use them as orchestration/cache layers around those direct calls.
  • For React/TypeScript widget code quality expectations, follow references/react-ts-standards.md.
  • If AuthKit/WorkOS is missing, prompt the user to run WORKOS_MODE=agent npx workos@latest install before continuing. WORKOS_MODE=agent keeps the installer deterministic (no prompts, no browser, no host-trust); pass --json when you need to parse the output.
  • Install additional dependencies only when strictly necessary, using the detected package manager/tooling.
  • Keep server-state handling aligned with the selected data-layer approach.
  • Use local state/reducers for UI interaction state as needed.
  • Prefer existing design system and styling conventions.
  • Avoid broad unrelated refactors and global style rewrites.

Completion Requirements

Before finishing, verify all relevant items:

  1. Widget component exists and accepts accessToken: string when component-level integration is in scope.
  2. Route/page wiring is complete when route integration is in scope.
  3. Token source matches existing app architecture (AuthKit client flow or backend WorkOS token flow).
  4. API methods and paths match the bundled OpenAPI spec, and data-layer usage matches project conventions.
  5. Loading and error branches exist for required query/mutation flows.

Validation Checklist

  1. Confirm endpoint paths and HTTP methods come from the bundled OpenAPI spec.
  2. Confirm request/response handling follows schema expectations from the spec.
  3. Confirm query/mutation invalidation/refetch is applied after successful mutations where required.
  4. Confirm empty/error/loading states are explicit and user-visible.
  5. Confirm package installs (if any) used the detected package manager/tooling.
  6. Confirm implementation stays aligned with existing codebase conventions.
  7. Confirm no existing component has been passed className or style props to override its built-in styling. Use each component as-is or via its own props API (variant, size, etc.).

© usenotra, AGPL-3.0. Rendered from Markdown: HTML in the file is shown as text, images as links, and headings moved down two levels. Raw file

Files

SKILL.md and 24 other files (references) in .agents/skills/workos-widgets of usenotra/notra.

  • SKILL.md
  • references/detection.md
  • references/fetching-apis.md
  • references/framework-go.md
  • references/framework-java.md
  • references/framework-mixed-repositories.md
  • references/framework-nextjs.md
  • references/framework-php.md
  • references/framework-python.md
  • references/framework-react-router.md
  • references/framework-ruby.md
  • references/framework-sveltekit.md
  • references/framework-tanstack-router.md
  • references/framework-tanstack-start.md
  • references/framework-vite.md
  • references/react-ts-standards.md
  • references/scripts/query-spec.cjs
  • references/scripts/query-spec.ts
  • references/styling-and-components.md
  • … and 6 more

Open the folder on GitHubat commit e6483cd

Compare with similar skills

Workos Widgets next to the 5 skills that share the most tags, products or categories with it. Stars are the repository's; “used in” counts other GitHub owners with a copy.

Workos Widgets compared with similar skills
SkillStarsUsed inTokensAuto-checkLicenceRepo updated
Workos Widgets this skillusenotra/notra256—~2kAutomated safety check: PassAGPL-3.0
AI SDKvercel-labs/ai-facts16821 repos~1.2kAutomated safety check: PassNone
Clerk React Patternsgeekskai/blog1031 repos~1kAutomated safety check: NotesMIT
Slabstencil-hq/slab111—~3.1kAutomated safety check: PassMIT
Spiceflowremorses/spiceflow167—~1.9kAutomated safety check: PassMIT
React Best Practicesryokun6/ryos1.3k—~2kAutomated safety check: PassMIT

Similar skills

  • AI SDK

    vercel-labs/ai-facts

    Official

    Answer questions about the AI SDK and help build AI-powered features.

    168 GitHub starsUsed in 21 repos~1.2k tokens
    AI & LLM EngineeringAuto-check passed
  • React SPA auth patterns with @clerk/react for Vite/CRA - ClerkProvider setup, useAuth/useUser/useClerk hooks, React Router protected routes, custom sign-in flows.

    103 GitHub starsUsed in 1 repo~1k tokens
    Frontend & DesignAuto-check: notes
  • Slab

    stencil-hq/slab

    Writing, editing, and rendering Slab documents (.slab) — the declarative design language for app screens, posters, terminal UIs, and interactive components.

    111 GitHub stars~3.1k tokensUpdated 1 mo ago
    Frontend & DesignAuto-check passed
  • Spiceflow

    remorses/spiceflow

    Spiceflow is a super simple, fast, and type-safe API and React Server Components framework for TypeScript.

    167 GitHub stars~1.9k tokensUpdated 2 days ago
    Backend & APIsAuto-check passed
  • React performance optimization guidelines from Vercel Engineering (vercel-labs/agent-skills).

    1.3k GitHub stars~2k tokensUpdated yesterday
    Frontend & DesignAuto-check passed
  • Clerk

    geekskai/blog

    Clerk authentication router. An agent skill from geekskai/blog.

    103 GitHub starsUsed in 3 repos~1.5k tokens
    Backend & APIsAuto-check passed

More from usenotra/notra

All 17 skills in this repo
  • Ponytail Help

    usenotra/notra

    Quick-reference card for all ponytail modes, skills, and commands.

    256 GitHub starsUsed in 3 repos~697 tokens
    Auto-check passed
  • Neon Postgres

    usenotra/notra

    Guides and best practices for working with Lakebase Postgres, the database behind Neon.

    256 GitHub stars~4.1k tokensUpdated today
    Auto-check: notes
  • Satori

    usenotra/notra

    Expert guidance for Satori, the library that converts JSX/HTML and CSS into SVG (the engine behind dynamic Open Graph images and social cards).

    256 GitHub stars~3k tokensUpdated today
    Auto-check passed
  • Autumn Catalog

    usenotra/notra

    Modeling a user's pricing into an Autumn catalog — deciding the structure (plans, variants, add-ons, licenses, credit systems, pooled balances) before writing config, then filling in the numbers.

    256 GitHub stars~6.1k tokensUpdated today
    Auto-check passed
  • Code Organization

    usenotra/notra

    Repo file-organization convention for TypeScript projects. An agent skill from usenotra/notra.

    256 GitHub stars~893 tokensUpdated today
    Auto-check passed
  • Effect

    usenotra/notra

    Opinionated guide for building production TypeScript applications with Effect v4.

    256 GitHub starsUsed in 1 repo~1.8k tokens
    Auto-check passed

Questions about Workos Widgets

What does Workos Widgets do?

A skill your agent uses when the user is implementing, embedding, or debugging a WorkOS Widget — specifically the User Management, User Profile, Admin Portal SSO Connection, or Admin Portal Domain…. Workos Widgets is an agent skill from usenotra/notra. Use when the user is implementing, embedding, or debugging a WorkOS Widget — specifically the User Management, User Profile, Admin Portal SSO Connection, or Admin Portal Domain Verification widgets.

When should I use Workos Widgets?

Workos Widgets fits situations like: the user is implementing; debugging a WorkOS Widget — specifically the User Management; admin Portal SSO Connection; admin Portal Domain Verification widgets.

How do I install Workos Widgets in Claude Code?

Run `npx skills add usenotra/notra --skill workos-widgets -a claude-code`. Or copy the skill folder (.agents/skills/workos-widgets in usenotra/notra) into .claude/skills/workos-widgets in your project. Claude Code loads it when a task matches its description.

How do I install Workos Widgets in Codex?

Run `npx skills add usenotra/notra --skill workos-widgets -a codex`. Or copy the skill folder (.agents/skills/workos-widgets in usenotra/notra) into .agents/skills/workos-widgets in your project. Codex loads it when a task matches its description.

Can I use Workos Widgets in Cursor, Gemini CLI or GitHub Copilot?

Cursor, Gemini CLI, GitHub Copilot and OpenCode also load SKILL.md folders. With the skills CLI, run `npx skills add usenotra/notra --skill workos-widgets -a cursor` (or -a gemini-cli, github-copilot or opencode for the others). To copy it by hand, put the folder in .cursor/skills/workos-widgets, .gemini/skills/workos-widgets, .github/skills/workos-widgets and .opencode/skills/workos-widgets in your project.

What does Workos Widgets need to run?

Going by SKILL.md and its folder, Workos Widgets needs JavaScript and TypeScript for the scripts in its folder and the command-line tools its instructions call (npx and node). Our summary lists: Node.js.

Does Workos Widgets access the network?

SKILL.md contains no URLs. Its commands use npx, which can reach the network depending on how they are called. This is read from the text; nothing was executed.

Is Workos Widgets safe to install?

Our automated static check of SKILL.md found no risky patterns, such as piping downloads into a shell, reading credential files or hidden Unicode. It is not a guarantee. Review the folder before installing.

What licence does Workos Widgets use?

Workos Widgets is published under the AGPL-3.0 licence (the repository's licence). It allows redistribution, so the full SKILL.md is shown on this page.

How many tokens does Workos Widgets use?

About 2k tokens (SKILL.md is roughly 8k characters). Agents keep only the skill's name and description in context until a task matches; then they load SKILL.md in full. Its references folder adds about 99k tokens, read only when the agent opens those files.

What are the alternatives to Workos Widgets?

Skills that share tags, products or a category with Workos Widgets: AI SDK (vercel-labs/ai-facts, 168 stars), Clerk React Patterns (geekskai/blog, 103 stars), Slab (stencil-hq/slab, 111 stars) and Spiceflow (remorses/spiceflow, 167 stars). The comparison table on this page puts their stars, adoption, token cost, safety result and licence side by side.

Who maintains Workos Widgets?

usenotra (a GitHub organization) maintains it in usenotra/notra, which has 256 GitHub stars. The repository holds 17 skills in this directory. The repository was last updated on October 8, 2026.

Source: usenotra/notra on GitHub. Facts on this page come from the repository at the commit we read; the author's words are quoted as theirs.