pp-nvd

Compare original and translation side by side

🇺🇸

Original

English

🇨🇳

Translation

Chinese

Nvd — Printing Press CLI

Prerequisites: Install the CLI

前提条件：安装CLI

This skill drives the

nvd-pp-cli

binary. You must verify the CLI is installed before invoking any command from this skill. If it is missing, install it first:

Install via the Printing Press installer:

bash

npx -y @mvanhorn/printing-press install nvd --cli-only

Verify:
```
nvd-pp-cli --version
```
Ensure
```
$GOPATH/bin
```
(or
```
$HOME/go/bin
```
) is on
```
$PATH
```
.

If the

npx

install fails (no Node, offline, etc.), fall back to a direct Go install (requires Go 1.23+):

bash

go install github.com/mvanhorn/printing-press-library/library/developer-tools/nvd/cmd/nvd-pp-cli@latest

--version

reports "command not found" after install, the install step did not put the binary on

$PATH

. Do not proceed with skill commands until verification succeeds.

本技能基于

nvd-pp-cli

二进制文件运行。在调用本技能的任何命令前，必须确认CLI已安装。若未安装，请先执行以下步骤：

通过Printing Press安装器安装：

bash

npx -y @mvanhorn/printing-press install nvd --cli-only

验证安装：
```
nvd-pp-cli --version
```
确保
```
$GOPATH/bin
```
（或
```
$HOME/go/bin
```
）已添加至
```
$PATH
```
环境变量。

如果

npx

安装失败（如无Node环境、离线等），可回退至直接通过Go安装（要求Go 1.23及以上版本）：

bash

go install github.com/mvanhorn/printing-press-library/library/developer-tools/nvd/cmd/nvd-pp-cli@latest

若安装后执行

--version

提示“command not found”，说明安装未将二进制文件加入

$PATH

。请在验证成功前不要执行本技能的命令。

When Not to Use This CLI

何时不应使用本CLI

Do not activate this CLI for requests that require creating, updating, deleting, publishing, commenting, upvoting, inviting, ordering, sending messages, booking, purchasing, or changing remote state. This printed CLI exposes read-only commands for inspection, export, sync, and analysis.

请勿在需要创建、更新、删除、发布、评论、点赞、邀请、订购、发送消息、预订、购买或修改远程状态的请求中激活本CLI。本CLI仅提供用于查看、导出、同步和分析的只读命令。

Command Reference

命令参考

json — Manage json

```
nvd-pp-cli json search-cpes
```
— Search Common Platform Enumeration names to find exact product identifiers for vulnerability lookups.
```
nvd-pp-cli json search-cves
```
— Search vulnerabilities by keyword, CVE ID, CPE name, publication date, or CVSS severity.

json — 管理JSON数据

```
nvd-pp-cli json search-cpes
```
— 搜索通用平台枚举（Common Platform Enumeration）名称，以查找漏洞查询所需的精确产品标识符。
```
nvd-pp-cli json search-cves
```
— 通过关键词、CVE ID、CPE名称、发布日期或CVSS严重程度搜索漏洞。

Finding the right command

查找合适的命令

When you know what you want to do but not which command does it, ask the CLI directly:

bash

nvd-pp-cli which "<capability in your own words>"

which

resolves a natural-language capability query to the best matching command from this CLI's curated feature index. Exit code

means at least one match; exit code

means no confident match — fall back to

--help

or use a narrower query.

当你知道要执行的操作但不确定对应命令时，可直接询问CLI：

bash

nvd-pp-cli which "<用你自己的语言描述功能>"

which

命令会将自然语言的功能查询解析为与本CLI精选功能索引最匹配的命令。退出码

表示至少找到一个匹配项；退出码

表示无匹配结果——此时可使用

--help

或缩小查询范围。

Auth Setup

认证设置

No authentication required.

Run

nvd-pp-cli doctor

to verify setup.

无需认证。

执行

nvd-pp-cli doctor

验证设置是否正确。

Agent Mode

Agent模式

Add

--agent

to any command. Expands to:

--json --compact --no-input --no-color --yes

Pipeable — JSON on stdout, errors on stderr
Filterable —
```
--select
```
keeps a subset of fields. Dotted paths descend into nested structures; arrays traverse element-wise. Critical for keeping context small on verbose APIs:
bash
```
nvd-pp-cli json search-cpes --agent --select id,name,status
```
Previewable —
```
--dry-run
```
shows the request without sending
Offline-friendly — sync/search commands can use the local SQLite store when available
Non-interactive — never prompts, every input is a flag
Read-only — do not use this CLI for create, update, delete, publish, comment, upvote, invite, order, send, or other mutating requests

在任意命令后添加

--agent

参数。这等同于同时设置：

--json --compact --no-input --no-color --yes

。

可管道传输 — 标准输出为JSON，错误信息输出至标准错误流
可过滤 —
```
--select
```
参数可保留字段子集。点路径可深入嵌套结构；数组会遍历每个元素。对于冗长的API，这是缩小上下文范围的关键：
bash
```
nvd-pp-cli json search-cpes --agent --select id,name,status
```
可预览 —
```
--dry-run
```
参数会显示请求内容但不发送
离线友好 — 同步/搜索命令可在本地SQLite存储可用时使用该存储
非交互式 — 从不弹出提示，所有输入均通过标志参数提供
只读 — 请勿使用本CLI执行创建、更新、删除、发布、评论、点赞、邀请、订购、发送或其他会修改状态的请求

Response envelope

响应信封

Commands that read from the local store or the API wrap output in a provenance envelope:

json

{
  "meta": {"source": "live" | "local", "synced_at": "...", "reason": "..."},
  "results": <data>
}

Parse

.results

for data and

.meta.source

to know whether it's live or local. A human-readable

N results (live)

summary is printed to stderr only when stdout is a terminal — piped/agent consumers get pure JSON on stdout.

从本地存储或API读取数据的命令会将输出包裹在来源信封中：

json

{
  "meta": {"source": "live" | "local", "synced_at": "...", "reason": "..."},
  "results": <data>
}

解析

.results

获取数据，通过

.meta.source

判断数据来自在线还是本地。仅当标准输出为终端时，才会向标准错误流打印人类可读的

N results (live)

摘要——管道/Agent消费者仅会在标准输出得到纯JSON。

Agent Feedback

Agent反馈

When you (or the agent) notice something off about this CLI, record it:

nvd-pp-cli feedback "the --since flag is inclusive but docs say exclusive"
nvd-pp-cli feedback --stdin < notes.txt
nvd-pp-cli feedback list --json --limit 10

Entries are stored locally at

~/.nvd-pp-cli/feedback.jsonl

. They are never POSTed unless

NVD_FEEDBACK_ENDPOINT

is set AND either

--send

is passed or

NVD_FEEDBACK_AUTO_SEND=true

. Default behavior is local-only.

Write what surprised you, not a bug report. Short, specific, one line: that is the part that compounds.

当你（或Agent）发现本CLI存在问题时，可记录反馈：

nvd-pp-cli feedback "the --since flag is inclusive but docs say exclusive"
nvd-pp-cli feedback --stdin < notes.txt
nvd-pp-cli feedback list --json --limit 10

反馈条目会本地存储在

~/.nvd-pp-cli/feedback.jsonl

。除非设置了

NVD_FEEDBACK_ENDPOINT

且传递了

--send

参数或设置

NVD_FEEDBACK_AUTO_SEND=true

，否则反馈不会被POST发送。默认行为仅本地存储。

请记录让你感到意外的内容，而非正式的错误报告。简短、具体、单行描述：这样的反馈更有价值。

Output Delivery

输出交付

Every command accepts

--deliver <sink>

. The output goes to the named sink in addition to (or instead of) stdout, so agents can route command results without hand-piping. Three sinks are supported:

Sink	Effect
`stdout`	Default; write to stdout only
`file:<path>`	Atomically write output to `<path>` (tmp + rename)
`webhook:<url>`	POST the output body to the URL ( `application/json` or `application/x-ndjson` when `--compact` )

Unknown schemes are refused with a structured error naming the supported set. Webhook failures return non-zero and log the URL + HTTP status on stderr.

所有命令均支持

--deliver <sink>

参数。输出会除了（或替代）标准输出外，发送至指定的sink，以便Agent无需手动管道即可路由命令结果。支持三种sink：

Sink	效果
`stdout`	默认值；仅写入标准输出
`file:<path>`	原子性地将输出写入 `<path>` （先写入临时文件再重命名）
`webhook:<url>`	将输出体POST至指定URL（当使用 `--compact` 时为 `application/json` 或 `application/x-ndjson` 格式）

不支持的协议会返回结构化错误，并列出支持的类型。Webhook失败会返回非零退出码，并在标准错误流中记录URL和HTTP状态码。

Named Profiles

命名配置文件

A profile is a saved set of flag values, reused across invocations. Use it when a scheduled agent calls the same command every run with the same configuration - HeyGen's "Beacon" pattern.

nvd-pp-cli profile save briefing --json
nvd-pp-cli --profile briefing json search-cpes
nvd-pp-cli profile list --json
nvd-pp-cli profile show briefing
nvd-pp-cli profile delete briefing --yes

Explicit flags always win over profile values; profile values win over defaults.

agent-context

lists all available profiles under

available_profiles

so introspecting agents discover them at runtime.

配置文件是一组保存的标志值，可在多次调用中复用。适用于定时Agent每次运行都使用相同配置调用同一命令的场景——即HeyGen的“Beacon”模式。

nvd-pp-cli profile save briefing --json
nvd-pp-cli --profile briefing json search-cpes
nvd-pp-cli profile list --json
nvd-pp-cli profile show briefing
nvd-pp-cli profile delete briefing --yes

显式标志始终优先于配置文件值；配置文件值优先于默认值。

agent-context

会在

available_profiles

下列出所有可用配置文件，以便自省Agent在运行时发现它们。

Exit Codes

退出码

Code	Meaning
0	Success
2	Usage error (wrong arguments)
3	Resource not found
5	API error (upstream issue)
7	Rate limited (wait and retry)
10	Config error

代码	含义
0	成功
2	使用错误（参数错误）
3	资源未找到
5	API错误（上游问题）
7	速率限制（等待后重试）
10	配置错误

Argument Parsing

参数解析

Parse

$ARGUMENTS

Empty,
help
, or
--help
→ show
```
nvd-pp-cli --help
```
output
Starts with
install
→ ends with
```
mcp
```
→ MCP installation; otherwise → see Prerequisites above
Anything else → Direct Use (execute as CLI command with
```
--agent
```
)

解析

$ARGUMENTS

的规则：

为空、
help
或
--help
→ 显示
```
nvd-pp-cli --help
```
的输出
以
install
开头 → 若结尾为
```
mcp
```
→ 安装MCP服务器；否则 → 参考上方的前提条件
其他情况 → 直接使用（以
```
--agent
```
参数执行CLI命令）

MCP Server Installation

MCP服务器安装

Install the MCP server:

bash

go install github.com/mvanhorn/printing-press-library/library/other/nvd-pp-cli/cmd/nvd-pp-mcp@latest

Register with Claude Code:
bash
```
claude mcp add nvd-pp-mcp -- nvd-pp-mcp
```
Verify:
```
claude mcp list
```

安装MCP服务器：

bash

go install github.com/mvanhorn/printing-press-library/library/other/nvd-pp-cli/cmd/nvd-pp-mcp@latest

向Claude Code注册：
bash
```
claude mcp add nvd-pp-mcp -- nvd-pp-mcp
```
验证：
```
claude mcp list
```

Direct Use

直接使用

Check if installed:
```
which nvd-pp-cli
```
If not found, offer to install (see Prerequisites at the top of this skill).
Match the user query to the best command from the Unique Capabilities and Command Reference above.

Execute with the

--agent

flag:

bash

nvd-pp-cli <command> [subcommand] [args] --agent

If ambiguous, drill into subcommand help:
```
nvd-pp-cli <command> --help
```
.

检查是否已安装：
```
which nvd-pp-cli
```
若未找到，提供安装选项（参见顶部前提条件部分）。
将用户查询与上方“独特功能”和“命令参考”中的最佳命令匹配。

使用

--agent

参数执行命令：

bash

nvd-pp-cli <command> [subcommand] [args] --agent

若存在歧义，查看子命令帮助：
```
nvd-pp-cli <command> --help
```
。