
Security News
TC39 Advances Temporal to Stage 4 Alongside Several ECMAScript Proposals
TC39’s March 2026 meeting advanced eight ECMAScript proposals, including Temporal reaching Stage 4 and securing its place in the ECMAScript 2026 specification.
ai-factory
Advanced tools

Stop configuring. Start building.
You want to build with AI, but setting up the right context, prompts, and workflows takes time. AI Factory handles all of that so you can focus on what matters — shipping quality code.
One command. Full AI-powered development environment.
ai-factory init
npm install -g ai-factory
mise use -g npm:ai-factory
# In your project directory
ai-factory init
This will:
Then open your AI agent and start working:
/aif
If the package is installed:
ai-factory init
Or running without installation via npx:
npx ai-factory init
ai-factory upgrade
ai-factory upgrade removes old bare-named skills (commit, feature, etc.) and installs new aif-* prefixed versions. Custom skills are preserved.
Note:
ai-factory updateautomatically checks npm for a newer CLI version and offers to install it before updating skills, then reportschanged/unchanged/skipped/removedfor installed base skills. Useai-factory update --forcefor a clean reinstall of currently installed base skills.
# Explore options and requirements before planning (optional)
/aif-explore Add user authentication with OAuth
# Need a strictly verified answer before changing anything?
/aif-grounded Does this repo already support OAuth providers?
# Plan a feature — creates branch, analyzes codebase, builds step-by-step plan
/aif-plan Add user authentication with OAuth
# Optionally refine the plan with deeper analysis
/aif-improve
# Execute the plan — implements tasks one by one, commits at checkpoints
/aif-implement
# Fix a bug — AI learns from every fix and gets smarter over time
/aif-fix TypeError: Cannot read property 'name' of undefined
# Set up CI pipeline — GitHub Actions or GitLab CI with linting, SA, tests
/aif-ci github
# Generate project documentation — README + docs/ with topics
/aif-docs
See the full Development Workflow with diagram and decision table.
AI Factory can generate and maintain your project docs with a single command:
/aif-docs # Creates README + docs/ structure from your codebase
/aif-docs --web # Also generates a static HTML documentation site
docs/ pages by topicdocs/ directory/aif-implement docs policy (Docs: yes = mandatory docs checkpoint routed to /aif-docs, Docs: no = visible WARN [docs])--web generates a static HTML site with navigation and dark mode, ready to host| Guide | Description |
|---|---|
| Getting Started | What is AI Factory, supported agents, CLI commands |
| Development Workflow | Workflow diagram, when to use explore vs grounded, spec-driven approach |
| Reflex Loop | Iterative generate → evaluate → critique → refine workflow |
| Core Skills | All slash commands — explore, grounded, plan, fix, implement, evolve, docs, and more |
| Skill Evolution | How /aif-fix patches feed into /aif-evolve to generate smarter skill rules |
| Plan Files | Plan files, self-improvement patches, skill acquisition |
| Security | Two-level security scanning for external skills |
| Extensions | Writing and installing extensions — commands, injections, MCP, agents |
| Configuration | .ai-factory.json, MCP servers, project structure, best practices |

MIT
FAQs
CLI tool for automating AI agent context setup in projects
The npm package ai-factory receives a total of 447 weekly downloads. As such, ai-factory popularity was classified as not popular.
We found that ai-factory demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
TC39’s March 2026 meeting advanced eight ECMAScript proposals, including Temporal reaching Stage 4 and securing its place in the ECMAScript 2026 specification.

Research
/Security News
Since January 31, 2026, we identified at least 72 additional malicious Open VSX extensions, including transitive GlassWorm loader extensions targeting developers.

Research
Six malicious Packagist packages posing as OphimCMS themes contain trojanized jQuery that exfiltrates URLs, injects ads, and loads FUNNULL-linked redirects.