Factory Plugins Marketplace

Factory's official plugin marketplace. Factory builds and maintains every plugin listed here.

Installation

Add this marketplace to Factory:

droid plugin marketplace add https://github.com/Factory-AI/factory-plugins

Then install plugins:

droid plugin install security-engineer@factory-plugins

Or browse available plugins via the UI:

/plugins

Available Plugins

core

Default plugin, pre-installed by the Droid CLI.

Output styles:

• Explanatory - Explains implementation choices and codebase patterns while completing the task

droid-control

Terminal, browser, and computer automation for Droids. Record demos, verify behavior claims, and run QA flows.

Commands: /demo, /verify, /qa-test

Skills: droid-control, which routes to its atoms: terminal-use, true-input, browser-use, desktop-use, droid-cli, pty-capture, capture, compose, verify, showcase

See plugins/droid-control/README.md for details.

security-engineer

Security review, threat modeling, vulnerability validation, and patch generation skills.

Skills:

• security-review - STRIDE-based security analysis
• threat-model-generation - Generate threat models for repositories
• commit-security-scan - Scan commits/PRs for security vulnerabilities
• vulnerability-validation - Validate and confirm security findings

typescript

Opinionated TypeScript and React patterns for safer, cleaner code.

Skills:

• ban-type-assertions - Ban as casts and replace them with compiler-verified alternatives (zod, control-flow narrowing)
• no-use-effect - Five replacement patterns for useEffect (derived state, query libraries, event handlers, useMountEffect, key)
• fix-knip-unused-exports - Fix every category of knip "Unused exports" violation

debugging

Inspect runtime behavior: HTTP interception, traffic capture, and wire-level debugging for CLIs and services.

Skills:

• http-toolkit-intercept - Intercept and debug HTTP traffic from any CLI, service, or script via HTTP Toolkit (language/runtime agnostic)

code-review

Pull request lifecycle skills: open, triage, and follow up on PRs with consistent conventions.

Skills:

• create-pr - Open a PR with Conventional Commits title, templated body, and local verification gates
• follow-up-on-pr - Rebase, address reviewer comments, fix CI, and push an existing PR to merge-ready state

droid-evolved

Skills for continuous learning and improvement.

Skills:

• human-writing - Remove AI writing patterns, make text sound human
• skill-creation - Create and improve Droid skills
• visual-design - Image generation (nanobanana CLI) and presentations (Slidev)
• frontend-design - Build web apps, websites, HTML pages with good design
• browser-navigation - Browser automation with agent-browser

autoresearch

Autonomous experiment loop for optimization research. Try an idea, measure it, keep what works, discard what doesn't, repeat. Works standalone or as a mission worker.

Contributing

We don't accept pull requests or plugin submissions from outside Factory.

To share your own plugins, publish your own marketplace. Any Git repository with a .factory-plugin/marketplace.json works, and users add it the same way they add this one:

droid plugin marketplace add your-org/your-plugins

The Factory docs cover the plugin format and the marketplace catalog.

To report a bug in one of these plugins, open an issue.