
Security News
Axios Maintainer Confirms Social Engineering Attack Behind npm Compromise
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.
speco-tasker
Advanced tools
Pure Task Management System optimized for built-in Agents in AI editors like Cursor and Windsurf
纯净的任务管理系统 | Pure Task Management System
专为 Cursor、Windsurf 等 AI 编辑器内置 Agent 优化的任务管理工具
Task management tool optimized for built-in Agents in AI editors like Cursor and Windsurf
基于 claude-task-master 二次开发,完全移除 AI 功能
# 全局安装 CLI 工具
npm install -g speco-tasker
# 或本地安装
npm install speco-tasker
由于 GitHub 会过滤非标准协议链接,请按以下步骤操作:
复制以下链接到浏览器地址栏:
cursor://anysphere.cursor-deeplink/mcp/install?name=speco-tasker&config=eyJjb21tYW5kIjoibnB4IiwiYXJncyI6WyJzcGVjby10YXNrZXIiXX0K
在浏览器中打开链接,Cursor 会自动处理安装
添加以下配置到 ~/.cursor/mcp.json:
{
"mcpServers": {
"speco-tasker": {
"command": "npx",
"args": ["speco-tasker"]
}
}
}
添加以下配置到 settings.json:
{
"mcp.servers": {
"speco-tasker": {
"command": "npx",
"args": ["speco-tasker"],
"type": "stdio"
}
}
}
# 初始化项目(自动检测配置)
speco-tasker init
# 查看任务列表
speco-tasker list
# 查看下一个任务
speco-tasker next
# 创建新任务
speco-tasker add-task --title "功能名称" --description "功能描述" --details "实现细节" --test-strategy "测试策略" --spec-files "docs/spec.md"
# 更新任务状态
speco-tasker set-status --id=1 --status=done
# 管理标签
speco-tasker add-tag feature-branch
speco-tasker use-tag feature-branch
# 跨标签移动任务
speco-tasker move --from=1 --from-tag=main --to-tag=feature-branch
本项目采用 MIT 许可证 - 查看 LICENSE 文件了解详情。
FAQs
Pure Task Management System optimized for built-in Agents in AI editors like Cursor and Windsurf
We found that speco-tasker demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.

Security News
Node.js has paused its bug bounty program after funding ended, removing payouts for vulnerability reports but keeping its security process unchanged.

Security News
The Axios compromise shows how time-dependent dependency resolution makes exposure harder to detect and contain.