功能描述

Project management for AI agents using markdown files. Install and use the cairn CLI to create projects, manage tasks, track status, and coordinate human-AI collaboration through a shared workspace of markdown files.

使用说明 (SKILL.md)

Cairn — AI-Native Project Management

Name: letcairn.work
Author: gregoryehill

Cairn gives you and your AI agent a shared workspace of markdown files for managing projects and tasks. Statuses are the shared language. Any AI that can read files is ready to go.

Installation

npm install -g cairn-work
cairn onboard

cairn onboard creates ~/cairn/ with auto-generated context files (AGENTS.md and .cairn/planning.md) that agents read automatically.

Community

Core Commands

Workspace

cairn status — Overview with task counts
cairn my — Your assigned tasks
cairn active — All in-progress tasks
cairn doctor — Diagnose workspace health

Projects & Tasks

cairn create project "Name" --description "..." --objective "..." — Create a project with charter
cairn create task "Name" --project \x3Cslug> --description "..." --objective "..." — Create a task
cairn list tasks [--status pending,in_progress] [--project slug] — List tasks with filters
cairn search "keyword" — Find tasks by content

Task Workflow

cairn start \x3Ctask-slug> — Begin work (sets in_progress)
cairn note \x3Ctask-slug> "Progress update" — Add a status note
cairn artifact \x3Ctask-slug> "Artifact Name" — Create a linked deliverable
cairn done \x3Ctask-slug> — Finish work (moves to review or completed)
cairn block \x3Ctask-slug> "Reason" — Mark as blocked

Maintenance

cairn update-skill — Refresh context files after CLI updates
cairn upgrade — Update CLI to latest version

Workspace Structure

~/cairn/
  AGENTS.md                  # Agent context (auto-generated)
  .cairn/planning.md         # Planning guide (auto-generated)
  projects/
    project-slug/
      charter.md             # Why, success criteria, context
      artifacts/             # Deliverables (design docs, proposals, etc.)
      tasks/                 # Individual task markdown files
  inbox/                     # Ideas to triage
  memory/                    # Workspace memory

Statuses

pending → next_up → in_progress → review → completed (or blocked at any point)

Autonomy Levels

Set per-task to control how much the agent can do:

propose — Agent plans only, finishes in review
draft — Agent does work, you approve before shipping
execute — Full autonomy, finishes as completed

Tips

Run cairn onboard first — it sets up everything the agent needs.
Use cairn my to see your current workload at a glance.
Artifacts (cairn artifact) create linked deliverables stored with the project.
All data is plain markdown with YAML frontmatter — version control friendly.

安全使用建议

This skill appears to do what it says (manage projects via a local markdown workspace) but has two practical concerns you should address before installing: (1) provenance of the 'cairn-work' npm package — review the package page and its source repo (postinstall scripts, maintainer, recent activity) and preferably inspect its code before running a global install; (2) filesystem access — the tool creates and expects ~/cairn and the SKILL.md implies agents will read those files automatically, so verify what file access your agent runtime will allow (limit to the ~/cairn folder, sandbox the CLI, or require explicit user invocation), and back up any existing data. If you need lower risk, run the CLI in a disposable/sandboxed environment or request the registry include an explicit install spec and declared config paths so permission boundaries are clear.

功能分析

Type: OpenClaw Skill Name: cairn-cli Version: 1.0.2 The skill bundle instructs the AI agent to execute `npm install -g cairn-work` in `SKILL.md` and `README.md`. While this command is necessary for the skill's stated purpose of installing the Cairn CLI, it involves executing code from an external source (npm registry) with global system permissions. This constitutes a significant supply chain risk, as a compromised `cairn-work` package could lead to arbitrary code execution. There is no evidence of intentional prompt injection to subvert the agent's core directives or other direct malicious actions within the analyzed files.

能力评估

ℹ Purpose & Capability

Name/description (AI project management with markdown) matches the SKILL.md content and CLI commands. However, the skill instructs installing an external npm package (cairn-work) and creating ~/cairn files even though the registry metadata declares no required config paths or install spec — a modest mismatch between claimed runtime requirements and declared metadata.

⚠ Instruction Scope

SKILL.md instructs agents to read and use auto-generated files under ~/cairn/ (AGENTS.md, .cairn/planning.md) and implies agents will 'read automatically.' That is coherent for a workspace tool, but the wording is vague and the registry doesn't declare those config paths. Any agent file access to the user's home directory could expose unrelated data if file-scope rules aren't enforced.

⚠ Install Mechanism

There is no install spec in the registry (instruction-only), yet the SKILL.md explicitly tells users to run 'npm install -g cairn-work'. Installing a global npm package pulls code from the public registry and may run install/postinstall scripts; the registry provides no provenance or vetted install mechanism here, which increases risk if the package or its maintainer are untrusted.

✓ Credentials

The skill requests no environment variables, credentials, or special config paths in registry metadata. That is proportionate to a local filesystem-based CLI tool. The remaining concern is implicit file access to ~/cairn rather than secret env access.

ℹ Persistence & Privilege

No 'always' flag is set and disableModelInvocation isn't set (defaults allow model invocation). This means the agent could potentially invoke the CLI if allowed; combined with the SKILL.md claim that agents 'read automatically', users should confirm agent runtime permissions and whether autonomous invocation is intended.

版本历史

v1.0.2

- Updated documentation in SKILL.md with a comprehensive CLI reference, usage tips, and detailed workspace structure. - Expanded descriptions for installation, core commands, statuses, and autonomy levels. - Added community links and support resources. - Clarified task workflow and project/task creation processes.

元数据

Slug cairn-cli

版本 1.0.2

许可证 —

累计安装 1

当前安装数 0

历史版本数 1

常见问题

letcairn.work 是什么？

Project management for AI agents using markdown files. Install and use the cairn CLI to create projects, manage tasks, track status, and coordinate human-AI collaboration through a shared workspace of markdown files. 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件，目前累计下载 1609 次。

如何安装 letcairn.work？

在 OpenClaw 或 Claude Code 对话框中运行命令「/install cairn-cli」即可一键安装，无需额外配置。

letcairn.work 是免费的吗？

是的，letcairn.work 完全免费（开源免费），可自由下载、安装和使用。

letcairn.work 支持哪些平台？

letcairn.work 跨平台运行，可在任意部署了 OpenClaw / Claude Code 的环境中使用（cross-platform）。

谁开发了 letcairn.work？

由 gregoryehill（@gregoryehill）开发并维护，当前版本 v1.0.2。

letcairn.work