
Security News
PHP Patches Critical RCE Vulnerabilities, Organizations Urged to Take Unpatched Sites Offline
PHP releases emergency patches for two critical RCE vulnerabilities as agencies urge organizations to take unpatched sites offline.
@promptbranch/cli
Advanced tools
Local-first CLI for versioning, searching, evaluating, and sharing AI prompts in shell pipelines and coding-agent workflows.
promptbranch (@promptbranch/cli) is a local-first prompt library CLI for
shell pipelines, scripts, and AI coding agents that do not speak MCP. Use it
to search and retrieve prompts, keep version history, record evaluations, and
share snapshots from the terminal. It works with the same local library as
the PromptBranch desktop app.
Requires Node.js 22 or later. No account is required for local library work.
Source: GitHub · documentation · report an issue
Run a command without a global install:
npx -y @promptbranch/cli@latest list --tag security
Or install the promptbranch command globally:
npm install --global @promptbranch/cli@latest
promptbranch list --tag security
Every command supports --json for machine-readable output. For example:
promptbranch get "security-audit" --json
promptbranch search "sanitize inputs" --limit 5
promptbranch db-path --json
get --json returns a stable versionId. Use
get --version-id <id>, report-run --version-id <id>, and
suggest --base-version-id <id> when automation must stay tied to the same
version record. A desktop user can amend its content; create a new version when
content must remain a historical snapshot. Version numbers are branch-scoped
display labels and can contain gaps after deletion.
db-path --json returns the resolved database path without creating or
migrating the database.
Use the CLI as a small prompt version-control layer in scripts and coding-agent harnesses:
list, search, and get browse the local prompt library.report-run records the tool, model, outcome rating (1–5), and summary.suggest proposes a variation as pending; a human approves it in the
desktop app before it can become current.suggestions lists the pending review queue.Prompt references resolve by id or title (exact, case-insensitive, or unique substring). See the CLI integration guide for all commands and options.
Sharing is a human-only action; the MCP server has no equivalent publish or import tool.
promptbranch publish "security-audit" --full-history
promptbranch import https://promptbranch.app/p/<id>
Before publishing, PromptBranch scans the snapshot for secrets. Imports create
a new local prompt with its tags and provenance note; they do not recreate the
remote version history. Use --portal <base-url> to override the sharing
portal for one command.
Set PROMPTBRANCH_DB=/path/to.db to use a different library. The desktop app,
CLI, and MCP server can share the same SQLite database; legacy
PROMPTHUB_DB and PROMPTBUILDER_DB variables remain supported as deprecated
fallbacks.
From the PromptBranch repository, with pnpm 11.7.0 available:
pnpm install
pnpm --filter @promptbranch/cli build
The bundled command is dist/index.js.
FAQs
Local-first CLI for versioning, searching, evaluating, and sharing AI prompts in shell pipelines and coding-agent workflows.
The npm package @promptbranch/cli receives a total of 0 weekly downloads. As such, @promptbranch/cli popularity was classified as not popular.
We found that @promptbranch/cli demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Security News
PHP releases emergency patches for two critical RCE vulnerabilities as agencies urge organizations to take unpatched sites offline.

Threat Research
/Security News
A supply chain attack compromised LiteLLM 1.107.0 on PyPI and Docker, spreading malware that steals cloud credentials, developer secrets, and AI provider keys.

Security News
vlt 1.5.0 links skills from JavaScript dependencies to coding agents, with lockfile versioning and Socket data to filter out known malicious packages.