
Security News
Attackers Are Hunting High-Impact Node.js Maintainers in a Coordinated Social Engineering Campaign
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.
ai-builder
Advanced tools
Composable building blocks for Claude Code
ai-builder is a package manager for Claude Code artifacts. Install community-built skills, agents, and commands directly into your .claude/ directory with a single command.
npm install -g ai-builder
Or use directly with npx:
npx ai-builder add agent git-town/code_reviewer
# Install an agent
npx ai-builder add agent git-town/code_reviewer
# Install a command
npx ai-builder add command truffle-ai/quality-checks
# Install a skill
npx ai-builder add skill anthropic/pdf
# Search for artifacts
npx ai-builder search "test"
# List installed artifacts
npx ai-builder list
Install an artifact from the registry:
npx ai-builder add <type> <author/slug>
Types: skill, agent, command
Examples:
# Install an agent
npx ai-builder add agent git-town/code_reviewer
# Install a command
npx ai-builder add command truffle-ai/quality-checks
# Install a skill
npx ai-builder add skill anthropic/mcp-builder
# Force reinstall (overwrite existing)
npx ai-builder add agent git-town/code_reviewer --force
Remove an installed artifact:
npx ai-builder remove <type> <author/slug>
npx ai-builder rm <type> <author/slug> # alias
Examples:
# Remove an agent
npx ai-builder remove agent git-town/code_reviewer
# Skip confirmation
npx ai-builder rm agent git-town/code_reviewer --yes
List all installed artifacts:
npx ai-builder list
npx ai-builder ls # alias
Options:
# Filter by type
npx ai-builder list --type agent
npx ai-builder list --type skill
npx ai-builder list --type command
Search the registry for artifacts:
npx ai-builder search <query>
Options:
# Filter by type
npx ai-builder search "review" --type agent
# Filter by task category
npx ai-builder search "nextjs" --task frontend
# Limit results
npx ai-builder search "database" --limit 5
Show CLI status and installed artifacts:
npx ai-builder status
Output includes:
Update the CLI to the latest version:
npx ai-builder update
Options:
# Check for updates without installing
npx ai-builder update --check
Generate shell completions for bash or zsh:
# Output completion script
npx ai-builder completion bash
npx ai-builder completion zsh
# Auto-install for current shell
npx ai-builder completion --setup
Manual installation:
# Bash
ai-builder completion bash >> ~/.bashrc
# Zsh
ai-builder completion zsh >> ~/.zshrc
| Type | Description | Install Location |
|---|---|---|
| skill | Background capabilities that enhance Claude's abilities | .claude/skills/{name}/ |
| agent | Specialized agents invoked with @agent-name | .claude/agents/{name}.md |
| command | Slash commands invoked with /command-name | .claude/commands/{name}.md |
Invoke agents by mentioning them with @:
@reviewer review my latest changes
Run commands with /:
/deps
Skills are automatically available to Claude Code - no invocation needed.
Find artifacts at aibuilder.sh
MIT
FAQs
CLI for installing Claude Code artifacts from aibuilder.sh
The npm package ai-builder receives a total of 33 weekly downloads. As such, ai-builder popularity was classified as not popular.
We found that ai-builder demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.

Security News
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.

Security News
Node.js has paused its bug bounty program after funding ended, removing payouts for vulnerability reports but keeping its security process unchanged.