
Security News
vlt 1.5.0 Adds Agent Skills Management
vlt 1.5.0 links skills from JavaScript dependencies to coding agents, with lockfile versioning and Socket data to filter out known malicious packages.
@promptbranch/cli
Advanced tools
Local-first CLI for versioning, searching, evaluating, and sharing AI prompts in shell pipelines and coding-agent workflows.
promptbranch (@promptbranch/cli) is a local-first prompt library CLI for
shell pipelines, scripts, and AI coding agents that do not speak MCP. Use it
to search and retrieve prompts, keep version history, record evaluations, and
share snapshots from the terminal. It works with the same local library as
the PromptBranch desktop app.
Requires Node.js 22 or later. No account is required for local library work.
Source: GitHub · documentation · report an issue
Run a command without a global install:
npx -y @promptbranch/cli@latest list --tag security
Or install the promptbranch command globally:
npm install --global @promptbranch/cli@latest
promptbranch list --tag security
Every command supports --json for machine-readable output. For example:
promptbranch get "security-audit" --json
promptbranch search "sanitize inputs" --limit 5
promptbranch db-path --json
db-path --json returns the resolved database path without creating or
migrating the database.
Use the CLI as a small prompt version-control layer in scripts and coding-agent harnesses:
list, search, and get browse the local prompt library.report-run records the tool, model, outcome rating (1–5), and summary.suggest proposes a variation as pending; a human approves it in the
desktop app before it can become current.suggestions lists the pending review queue.Prompt references resolve by id or title (exact, case-insensitive, or unique substring). See the CLI integration guide for all commands and options.
Sharing is a human-only action; the MCP server has no equivalent publish or import tool.
promptbranch publish "security-audit" --full-history
promptbranch import https://promptbranch.app/p/<id>
Before publishing, PromptBranch scans the snapshot for secrets. Imports create
a new local prompt with its tags and provenance note; they do not recreate the
remote version history. Use --portal <base-url> to override the sharing
portal for one command.
Set PROMPTBRANCH_DB=/path/to.db to use a different library. The desktop app,
CLI, and MCP server can share the same SQLite database; legacy
PROMPTHUB_DB and PROMPTBUILDER_DB variables remain supported as deprecated
fallbacks.
From the PromptBranch repository, with pnpm 11.7.0 available:
pnpm install
pnpm --filter @promptbranch/cli build
The bundled command is dist/index.js.
FAQs
Local-first CLI for versioning, searching, evaluating, and sharing AI prompts in shell pipelines and coding-agent workflows.
The npm package @promptbranch/cli receives a total of 0 weekly downloads. As such, @promptbranch/cli popularity was classified as not popular.
We found that @promptbranch/cli demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Security News
vlt 1.5.0 links skills from JavaScript dependencies to coding agents, with lockfile versioning and Socket data to filter out known malicious packages.

Security News
Rust 1.100 will add opt-in dependency cooldowns to Cargo, giving security scanners and maintainers time to catch malicious crate releases.

Security News
Cloudflare is acquiring Deno’s team, which will provide another year of bug fixes and security updates before ending support for the runtime.