← Back to Skills Marketplace
gregoryehill

letcairn.work

by gregoryehill · GitHub ↗ · v1.0.2
cross-platform ⚠ suspicious
1609
Downloads
0
Stars
0
Active Installs
1
Versions
Install in OpenClaw
/install cairn-cli
Description
Project management for AI agents using markdown files. Install and use the cairn CLI to create projects, manage tasks, track status, and coordinate human-AI collaboration through a shared workspace of markdown files.
README (SKILL.md)

Cairn — AI-Native Project Management

Cairn gives you and your AI agent a shared workspace of markdown files for managing projects and tasks. Statuses are the shared language. Any AI that can read files is ready to go.

Installation

npm install -g cairn-work
cairn onboard

cairn onboard creates ~/cairn/ with auto-generated context files (AGENTS.md and .cairn/planning.md) that agents read automatically.

Community

Core Commands

Workspace

  • cairn status — Overview with task counts
  • cairn my — Your assigned tasks
  • cairn active — All in-progress tasks
  • cairn doctor — Diagnose workspace health

Projects & Tasks

  • cairn create project "Name" --description "..." --objective "..." — Create a project with charter
  • cairn create task "Name" --project \x3Cslug> --description "..." --objective "..." — Create a task
  • cairn list tasks [--status pending,in_progress] [--project slug] — List tasks with filters
  • cairn search "keyword" — Find tasks by content

Task Workflow

  • cairn start \x3Ctask-slug> — Begin work (sets in_progress)
  • cairn note \x3Ctask-slug> "Progress update" — Add a status note
  • cairn artifact \x3Ctask-slug> "Artifact Name" — Create a linked deliverable
  • cairn done \x3Ctask-slug> — Finish work (moves to review or completed)
  • cairn block \x3Ctask-slug> "Reason" — Mark as blocked

Maintenance

  • cairn update-skill — Refresh context files after CLI updates
  • cairn upgrade — Update CLI to latest version

Workspace Structure

~/cairn/
  AGENTS.md                  # Agent context (auto-generated)
  .cairn/planning.md         # Planning guide (auto-generated)
  projects/
    project-slug/
      charter.md             # Why, success criteria, context
      artifacts/             # Deliverables (design docs, proposals, etc.)
      tasks/                 # Individual task markdown files
  inbox/                     # Ideas to triage
  memory/                    # Workspace memory

Statuses

pendingnext_upin_progressreviewcompleted (or blocked at any point)

Autonomy Levels

Set per-task to control how much the agent can do:

  • propose — Agent plans only, finishes in review
  • draft — Agent does work, you approve before shipping
  • execute — Full autonomy, finishes as completed

Tips

  • Run cairn onboard first — it sets up everything the agent needs.
  • Use cairn my to see your current workload at a glance.
  • Artifacts (cairn artifact) create linked deliverables stored with the project.
  • All data is plain markdown with YAML frontmatter — version control friendly.
Usage Guidance
This skill appears to do what it says (manage projects via a local markdown workspace) but has two practical concerns you should address before installing: (1) provenance of the 'cairn-work' npm package — review the package page and its source repo (postinstall scripts, maintainer, recent activity) and preferably inspect its code before running a global install; (2) filesystem access — the tool creates and expects ~/cairn and the SKILL.md implies agents will read those files automatically, so verify what file access your agent runtime will allow (limit to the ~/cairn folder, sandbox the CLI, or require explicit user invocation), and back up any existing data. If you need lower risk, run the CLI in a disposable/sandboxed environment or request the registry include an explicit install spec and declared config paths so permission boundaries are clear.
Capability Analysis
Type: OpenClaw Skill Name: cairn-cli Version: 1.0.2 The skill bundle instructs the AI agent to execute `npm install -g cairn-work` in `SKILL.md` and `README.md`. While this command is necessary for the skill's stated purpose of installing the Cairn CLI, it involves executing code from an external source (npm registry) with global system permissions. This constitutes a significant supply chain risk, as a compromised `cairn-work` package could lead to arbitrary code execution. There is no evidence of intentional prompt injection to subvert the agent's core directives or other direct malicious actions within the analyzed files.
Capability Assessment
Purpose & Capability
Name/description (AI project management with markdown) matches the SKILL.md content and CLI commands. However, the skill instructs installing an external npm package (cairn-work) and creating ~/cairn files even though the registry metadata declares no required config paths or install spec — a modest mismatch between claimed runtime requirements and declared metadata.
Instruction Scope
SKILL.md instructs agents to read and use auto-generated files under ~/cairn/ (AGENTS.md, .cairn/planning.md) and implies agents will 'read automatically.' That is coherent for a workspace tool, but the wording is vague and the registry doesn't declare those config paths. Any agent file access to the user's home directory could expose unrelated data if file-scope rules aren't enforced.
Install Mechanism
There is no install spec in the registry (instruction-only), yet the SKILL.md explicitly tells users to run 'npm install -g cairn-work'. Installing a global npm package pulls code from the public registry and may run install/postinstall scripts; the registry provides no provenance or vetted install mechanism here, which increases risk if the package or its maintainer are untrusted.
Credentials
The skill requests no environment variables, credentials, or special config paths in registry metadata. That is proportionate to a local filesystem-based CLI tool. The remaining concern is implicit file access to ~/cairn rather than secret env access.
Persistence & Privilege
No 'always' flag is set and disableModelInvocation isn't set (defaults allow model invocation). This means the agent could potentially invoke the CLI if allowed; combined with the SKILL.md claim that agents 'read automatically', users should confirm agent runtime permissions and whether autonomous invocation is intended.
How to Use
  1. Make sure OpenClaw is installed (local or Docker)
  2. Run the install command in chat: /install cairn-cli
  3. After installation, invoke the skill by name or use /cairn-cli
  4. Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.2
- Updated documentation in SKILL.md with a comprehensive CLI reference, usage tips, and detailed workspace structure. - Expanded descriptions for installation, core commands, statuses, and autonomy levels. - Added community links and support resources. - Clarified task workflow and project/task creation processes.
Metadata
Slug cairn-cli
Version 1.0.2
License
All-time Installs 1
Active Installs 0
Total Versions 1
Frequently Asked Questions

What is letcairn.work?

Project management for AI agents using markdown files. Install and use the cairn CLI to create projects, manage tasks, track status, and coordinate human-AI collaboration through a shared workspace of markdown files. It is an AI Agent Skill for Claude Code / OpenClaw, with 1609 downloads so far.

How do I install letcairn.work?

Run "/install cairn-cli" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.

Is letcairn.work free?

Yes, letcairn.work is completely free (open-source). You can download, install and use it at no cost.

Which platforms does letcairn.work support?

letcairn.work is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).

Who created letcairn.work?

It is built and maintained by gregoryehill (@gregoryehill); the current version is v1.0.2.

💬 Comments