
Security News
Ruby's Bundler 4.0.18 Extends Cooldown to bundle lock and bundle cache
The supply chain control that delays freshly published gems now covers lockfile generation and gem vendoring in Ruby projects.
agent-factory
Advanced tools
Work-based Multi-Agent System — install with npm, run with npx. No git clone needed.
Multi-agent orchestration for your AI coding assistant.
Describe what you want — Agent Factory breaks it into stages, assigns agents, and executes the full pipeline. Ships as an MCP server with 27 tools. Works with Claude Code, OpenCode, or any MCP client.
npm install -g agent-factory
That's it. Python dependencies are auto-installed. Restart your AI tool and start using it.
Give it an error message or symptom. It scans your project, finds the root cause, and proposes a fix.
You: "ZFS quota list isn't showing up. Find out why."
→ perform_rca scans your code
→ Returns root cause analysis + fix proposal
→ approve_workflow → auto-generates the patch
Describe a feature vaguely. It asks clarifying questions, refines the requirements, then implements.
You: "I want real-time notifications."
→ refine_idea asks 3-5 clarifying questions
→ You answer → submit_idea_refinement
→ Refined requirements + implementation plan
→ approve_workflow → architecture → code → validation
One prompt, end-to-end execution.
You: "Build a REST API with JWT auth and user management."
→ execute_workflow(work_type="software_development")
→ Analysis → Design → Implementation (writes files) → Validation
npm install -g agent-factory
Postinstall automatically:
~/.agent-factory/venvmcp, pyyaml, and the agent-factory packageRequirements: Node.js ≥ 14, Python ≥ 3.10
npx agent-factory
OpenCode — auto-configured during install. Just restart.
Claude Code — register manually:
claude mcp add agent-factory -- npx agent-factory
Any MCP client — add to your config:
{
"mcpServers": {
"agent-factory": {
"command": "npx",
"args": ["agent-factory"]
}
}
}
Restart your AI tool. You should see tools like execute_workflow, perform_rca, refine_idea in the MCP tools list.
| Type | Stages |
|---|---|
software_development | analysis → design → implementation → validation |
ml_development | problem → data → design → training → evaluation → deployment |
test_generation | analysis → design → validation |
data_analysis | problem → data → evaluation |
code_review | analysis → validation |
Omit work_type to auto-detect.
| Doc | Content |
|---|---|
| Setup Guide | Detailed install, env vars, troubleshooting |
| MCP Tools Reference | All 27 tools — params, returns, examples |
| Architecture | Internal structure, core components, state |
| API Reference | Python classes and methods |
| OpenCode Integration | Plugin structure and setup |
| OpenCode Usage Guide | Practical usage in OpenCode |
| Changelog | What's new in each version |
MIT
FAQs
Work-based Multi-Agent System — install with npm, run with npx. No git clone needed.
We found that agent-factory demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
The supply chain control that delays freshly published gems now covers lockfile generation and gem vendoring in Ruby projects.

Security News
During a UK cyber test, a Mythos 5 agent used sockpuppets, social engineering, and prompt injection to try to get a maintainer to merge malware.

Company News
Socket is now in the AWS Security Hub Extended plan. Adopt it through AWS, apply committed spend, and block malicious open source packages.