← Back to Skills Marketplace
zheroz00

carl's corkie -- a digitial corkboard for your agent

by zheroz00 · GitHub ↗ · v1.0.0 · MIT-0
cross-platform ✓ Security Clean
137
Downloads
0
Stars
0
Active Installs
1
Versions
Install in OpenClaw
/install corkboard-dashboard
Description
Post and manage real-time corkboard pins, lamp cues, deleted-history recovery, and multi-track project pipeline work for the Carl's Corkie dashboard. Use whe...
README (SKILL.md)

Corkboard Dashboard

Use this skill when you need to put something actionable on the board right now. Prefer a pin for one-off work or a project for multi-step work with tracks, handoffs, and task checklists.

Quick Start

  1. Install or update the dashboard:
export CORKBOARD_REPO="https://github.com/Grooves-n-Grain/carls-corkie.git"   # first-time installs only
bash {baseDir}/scripts/install.sh
  1. Point tooling at the running API. Use localhost on the same machine, the machine's LAN IP from another trusted device, or a public reverse-proxy hostname if the operator has exposed /api/* externally (see the main README). The dashboard requires a bearer token; the helper script auto-loads it from .env in the install directory:
CORKBOARD_API=http://localhost:3010
# or LAN:
CORKBOARD_API=http://\x3Clan-ip>:3010
# or public reverse-proxy hostname (API routes only, frontend not exposed):
CORKBOARD_API=https://corkie-api.example.com

# CORKBOARD_TOKEN is auto-loaded from .env. To set it manually:
export CORKBOARD_TOKEN="$(grep '^CORKBOARD_TOKEN=' /path/to/dashboard/.env | cut -d= -f2-)"
  1. Post work with the bundled helper (it adds the auth header for you):
bash {baseDir}/scripts/corkboard.sh add task "Review PR" "Auth refactor complete" 1
bash {baseDir}/scripts/corkboard.sh add alert "Server down" "API returning 503s" 1
bash {baseDir}/scripts/corkboard.sh add link "Error logs" "https://logs.example.com/errors"
bash {baseDir}/scripts/corkboard.sh add-opportunity "Wholesale inquiry" "Follow up with studio buyer" 2
bash {baseDir}/scripts/corkboard.sh add-briefing "Morning briefing" "## Today\
- Ship the fix\
- Reply to supplier"
  1. Use the REST API directly for projects, cellar ideas, history/restore, track updates, and lamp state. Every request to /api/* needs the Authorization: Bearer $CORKBOARD_TOKEN header:
curl -X POST "$CORKBOARD_API/api/pins" \
  -H "Authorization: Bearer $CORKBOARD_TOKEN" \
  -H "Content-Type: application/json" \
  -d '{"type":"task","title":"Review PR","content":"Auth refactor complete","priority":1}'

curl -X POST "$CORKBOARD_API/api/projects" \
  -H "Authorization: Bearer $CORKBOARD_TOKEN" \
  -H "Content-Type: application/json" \
  -d '{"name":"Launch blog","emoji":"✍️","phase":"build","tracks":[{"name":"Write posts","owner":"claude"},{"name":"Review","owner":"you"}]}'

Editing Pins

Task and Note pins can be edited inline on the dashboard by double-clicking the title. From the API, use PATCH /api/pins/:id to update any field:

# Update a pin's title and content
curl -X PATCH "$CORKBOARD_API/api/pins/\x3Cpin-id>" \
  -H "Authorization: Bearer $CORKBOARD_TOKEN" \
  -H "Content-Type: application/json" \
  -d '{"title":"Updated title","content":"New content here"}'

Pick The Right Surface

  • Use a pin for one-off tasks, alerts, links, notes, briefings, tracking updates, or short-lived reminders.
  • Use a project for multi-step work with phases, tracks, and task lists shared between the agent and the human.
  • Use projectStatus: "cellar" or POST /api/projects/:id/cellar for future ideas that should stay off the active board until they are ready.
  • Tracks are owned by claude, you, or shared; finishing a track can automatically create a follow-up task pin for the next handoff.
  • Use deleted pin history plus restore routes when something should come back to the board instead of being recreated from scratch.
  • Prefer priority: 1 for urgent work, 2 for the normal default, and 3 for low urgency.
  • The dashboard ships with a shared bearer token (CORKBOARD_TOKEN) generated on first run. Keep .env private; the helper script reads the token from there automatically. To disable auth (only behind a reverse-proxy auth layer), set CORKBOARD_AUTH=disabled in .env.

Common Actions

bash {baseDir}/scripts/corkboard.sh list
bash {baseDir}/scripts/corkboard.sh complete \x3Cpin-id>
bash {baseDir}/scripts/corkboard.sh delete \x3Cpin-id>
bash {baseDir}/scripts/corkboard.sh add-email \x3Cfrom> \x3Csubject> [preview] [email_id]
bash {baseDir}/scripts/corkboard.sh add-github \x3Cowner/repo> [description] [stars] [forks]
bash {baseDir}/scripts/corkboard.sh add-idea \x3Ctitle> [verdict] [summary] [scores_json] [competitors] [effort]
bash {baseDir}/scripts/corkboard.sh add-tracking \x3Cnumber> \x3Ccarrier> [status] [eta] [url]
bash {baseDir}/scripts/corkboard.sh add-article \x3Ctitle> \x3Curl> \x3Csource> \x3Ctldr> [bullets_json] [tags_json]
bash {baseDir}/scripts/corkboard.sh add-opportunity \x3Ctitle> [content] [priority]
bash {baseDir}/scripts/corkboard.sh add-briefing \x3Ctitle> \x3Ccontent>
bash {baseDir}/scripts/corkboard.sh add-twitter \x3Ctitle> \x3Ccontent> [url]
bash {baseDir}/scripts/corkboard.sh add-reddit \x3Ctitle> \x3Ccontent> [url]
bash {baseDir}/scripts/corkboard.sh add-youtube \x3Cyoutube-url>
curl -H "Authorization: Bearer $CORKBOARD_TOKEN" "$CORKBOARD_API/api/pins/history/deleted"
curl -X POST -H "Authorization: Bearer $CORKBOARD_TOKEN" "$CORKBOARD_API/api/pins/\x3Cpin-id>/restore"
curl -X POST -H "Authorization: Bearer $CORKBOARD_TOKEN" "$CORKBOARD_API/api/projects/\x3Cproject-id>/cellar"
curl -X POST -H "Authorization: Bearer $CORKBOARD_TOKEN" "$CORKBOARD_API/api/lamp/waiting"

References

  • API routes, socket events, project statuses, track attachments, deleted-history behavior, and lamp controls: {baseDir}/references/api.md
  • Install, LAN access, env vars, helper script usage, and trusted-network notes: {baseDir}/references/setup.md
  • Pin types, specialized payload shapes, and example request bodies: {baseDir}/references/pin-types.md
Usage Guidance
This skill appears to do what it says: install and run a local corkboard web app and provide a CLI to post pins. Before installing, verify the GitHub repo is trustworthy (it's the repo the installer clones). Be aware of two practical risks: (1) npm install runs third-party packages—this is normal but a supply-chain exposure; run the installer on a machine you control and review package.json if concerned. (2) The dashboard auto-generates and embeds a bearer token (VITE_CORKBOARD_TOKEN) into the frontend build; if you expose the frontend or the API publicly, that token could be leaked. Keep the .env private, do not publish ports to the public internet without proper reverse-proxy/auth, and rotate the CORKBOARD_TOKEN if you suspect it was exposed. If you plan to integrate Home Assistant, treat HA_TOKEN as highly sensitive and avoid putting it on any publicly reachable instance.
Capability Analysis
Type: OpenClaw Skill Name: corkboard-dashboard Version: 1.0.0 The corkboard-dashboard skill bundle is a legitimate tool for managing a task and project dashboard. The installation script (scripts/install.sh) clones a repository from GitHub, installs dependencies via npm, and sets up a local server, while the CLI helper (scripts/corkboard.sh) provides a functional interface for the AI agent to post and manage pins. All behaviors, including the use of PM2 for process management and the retrieval of authentication tokens from a local .env file, are clearly aligned with the stated purpose of the skill and lack any indicators of malicious intent or data exfiltration.
Capability Tags
cryptorequires-oauth-tokenrequires-sensitive-credentials
Capability Assessment
Purpose & Capability
Name/description match the included scripts and docs: installer clones a corkboard repo, builds a Node app, and the CLI helper posts pins to that app. Required tools (node, npm, git, curl, jq) and the .env token are consistent with running a local web dashboard.
Instruction Scope
Runtime instructions and the helper script explicitly read CORKBOARD_TOKEN from a local .env and curl the dashboard API. This is expected for the stated purpose, but the docs also note the client bakes VITE_CORKBOARD_TOKEN into the frontend bundle (so the token may be exposed if the frontend is served publicly). The SKILL.md advises keeping .env private and not exposing the service without a reverse proxy.
Install Mechanism
Installer is a shell script that clones the project from the declared GitHub repo and runs 'npm install' and 'npm run build' (optionally uses PM2). Cloning from GitHub and running npm is appropriate for a Node app, but it carries the usual supply-chain risk (npm postinstall scripts, third-party dependencies). The repo URL is a GitHub URL (not a random IP/shortener), which is lower risk than arbitrary downloads.
Credentials
The skill metadata declares no required env vars, which is accurate; runtime uses CORKBOARD_TOKEN and optional integration vars (HA_URL/HA_TOKEN, LAMP_SERVER, CORKBOARD_ALERT_URL) that are relevant to optional features. These variables are proportionate to the dashboard's function, but be careful: HA_TOKEN and CORKBOARD_TOKEN are sensitive. Also note VITE_CORKBOARD_TOKEN is intentionally baked into the client bundle on build, which can expose the token to anyone who can load the frontend.
Persistence & Privilege
always:false and normal autonomous invocation. Installer copies the skill into the OpenClaw workspace and starts a local service (PM2 optional). It does not modify other skills or system-wide configs beyond typical service startup and workspace registration.
How to Use
  1. Make sure OpenClaw is installed (local or Docker)
  2. Run the install command in chat: /install corkboard-dashboard
  3. After installation, invoke the skill by name or use /corkboard-dashboard
  4. Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.0
Initial release of the corkboard_dashboard skill. - Enables real-time posting and management of corkboard pins, lamp cues, and project pipelines for Carl's Corkie dashboard. - Supports task, alert, opportunity, link, briefing, package tracking, article summary, YouTube, and idea management. - Includes tools for deleted pin history recovery and multi-track project handoff. - Provides both shell helpers and a REST API for easy integration and automation. - Features inline editing of pins, cellar ideas for future work, and customizable urgency levels.
Metadata
Slug corkboard-dashboard
Version 1.0.0
License MIT-0
All-time Installs 0
Active Installs 0
Total Versions 1
Frequently Asked Questions

What is carl's corkie -- a digitial corkboard for your agent?

Post and manage real-time corkboard pins, lamp cues, deleted-history recovery, and multi-track project pipeline work for the Carl's Corkie dashboard. Use whe... It is an AI Agent Skill for Claude Code / OpenClaw, with 137 downloads so far.

How do I install carl's corkie -- a digitial corkboard for your agent?

Run "/install corkboard-dashboard" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.

Is carl's corkie -- a digitial corkboard for your agent free?

Yes, carl's corkie -- a digitial corkboard for your agent is completely free, licensed under MIT-0. You can download, install and use it at no cost.

Which platforms does carl's corkie -- a digitial corkboard for your agent support?

carl's corkie -- a digitial corkboard for your agent is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).

Who created carl's corkie -- a digitial corkboard for your agent?

It is built and maintained by zheroz00 (@zheroz00); the current version is v1.0.0.

💬 Comments