by addyosmani · Claude Skill · ★ 85
Last updated: · Indexed by AgentSkillsHub · Auto-synced every 8h
git clone https://github.com/addyosmani/factory.gitTaken from the project's README on GitHub.
None of the 42 rules matched — no credential harvesting, no data exfiltration, no curl-pipe-shell installer. Scanned against 42 published rules built on the SlowMist agent-security taxonomy, refreshed every 8 hours.
The quality score combines nine heuristic checks of the repo and its README: completeness, clarity, specificity, examples, structure, agent readiness, step-by-step content, instruction quality and security notes. It rates how well the project explains itself to an agent, not the code.
| Stars | 85 |
| Forks | 6 |
| Language | Shell |
| Category | Claude Skill |
| License | MIT |
| Quality Score | 57/100 |
| Open Issues | 2 |
| Last Updated | 2026-08-21 |
| Created | 2026-08-18 |
| Platforms | claude-code, cli, codex |
| Est. Tokens | ~7k |
Factory: a reference software factory A software factory is a repeatable loop around software delivery. Instead of opening a new agent session for every issue and steering it by hand, you define what work may be attempted, how work starts, what evidence must be produced, and where a human must make the decision.
These tools work well together with factory for enhanced workflows:
Looking for a factory alternative? If you're comparing factory with other claude skill tools, these 6 projects are the closest alternatives on Agent Skills Hub — ranked by topic overlap, star count, and community traction.
Engineering Software Factory - open source, self-hosted, local AI first
Build your own software factory with AI agents
AI agents can now write 99% of the code. This changes what it means to be a developer. Our role shifts to know
Make your AI agents work as a team. You keep working in 1 session while it orchestrates models via your other
The rules layer for AI-written code — rig-lite: a fail-closed cross-model review gate, a written constitution,
All slop must die. Airlock is where every git push turns into a slop-free PR.
Explore other popular claude skill tools:
Grades come from a rule-based scan built on the SlowMist agent-security taxonomy: 42 published rules, covering credential harvesting, data exfiltration, curl | sh installers and more. It is a first-layer scan, not a manual audit — we say so rather than overstate it.
The scale of the problem is documented independently: Liu et al. (2026), in a study of 31,132 agent skills, report that 26.1% contain security vulnerabilities. Our own full-catalog census is published as a citable open dataset.
Sources & who's responsible: