Factory-AIOfficial·11 Agent Skills Included

factory-plugins

Security scans, code review, debugging, and terminal automation

Scans code for security vulnerabilities with STRIDE threat modeling, validates findings, and generates fixes. Automates pull request creation, code review, TypeScript cleanup, and HTTP traffic debugging without manual effort. Records terminal and browser sessions, runs autonomous optimization experiments, and builds polished demo videos.

101|10

↗

npx skills add Factory-AI/factory-plugins --all -g -y

All Skills in This Repository (11)

Pure Emerald Level Indicators

📦 In Repo

Factory-AI

threat-model-generation

Generate a STRIDE-based threat model with threat-model.md and security-config.json.

commit-security-scan

Automate security analysis of code changes with threat-model patterns.

vulnerability-validation

Validate security findings by assessing exploitability and generating proof-of-concept exploits.

security-review

Identify and validate security vulnerabilities in code changes using STRIDE threat modeling.

init

Generate a starter AGENTS.md contributor guide with project structure, commands, style, testing, and PR sections.

session-navigation

Find, list, and search local Droid sessions stored under ~/.factory/sessions/.

visual-design

Generate images via nanobanana CLI and create Slidev slide decks from Markdown.

human-writing

Detect and rewrite AI-writing patterns to preserve meaning and adjust tone.

browser-navigation

Automate browser testing, form filling, and data extraction across web pages.

skill-creation

Identify and formalize reusable Droid skills from sessions into Markdown with YAML frontmatter.

frontend-design

Build web app, landing page, and UI component interfaces with design systems.

Official

Advanced

Frequently Asked Questions

FAQPage Schema

How to install factory-plugins?▼

Run `npx skills add Factory-AI/factory-plugins --all -g -y` in your terminal to install all plugins in this collection globally.

How to scan code for security vulnerabilities?▼

The security-engineer plugin generates a STRIDE threat model, scans commits and PRs for vulnerabilities, validates exploitability, and filters false positives automatically.

Can it automate pull request workflows?▼

Yes. The code-review plugin opens PRs with Conventional Commits titles and templated bodies, then rebases, addresses reviewer comments, and fixes CI issues until merge-ready.

Does it work with TypeScript and React projects?▼

Yes. Dedicated skills ban unsafe type assertions, replace useEffect with safer patterns, and fix unused export violations reported by knip.

Can I record terminal and browser demos?▼

Yes. The droid-control plugin drives terminals, browsers, and desktop apps to capture recordings, then composes polished videos with titles, effects, and keystroke overlays.