feat: add Figranium plugin

[asernasr]

Plugin Submission

Plugin information

• Author: figranium
• Plugin name: figranium
• Version: 0.0.1
• Source repository: https://github.com/figranium/figranium-dify
• Contact: integrations@figranium.dev

Submission type

• New plugin
• Version update

What changed

Adds the official Figranium Dify Tool Plugin.

It provides two focused tools:

• Execute Task: runs a saved Figranium browser automation task by task ID, with optional runtime variable overrides.
• List Tasks: lists saved task IDs, names, and descriptions for task discovery.

The plugin uses the documented Figranium API endpoints and x-api-key authentication. It includes a shared typed HTTP client, credential validation, bounded timeouts, clear secret-safe errors, official light/dark Figranium icons, README, and privacy policy.

Risk level

• Low risk
• Medium risk
• High risk

Required checks

• I have read and followed the Marketplace submission requirements.
• I have read and comply with the Plugin Developer Agreement.
• I tested this plugin on Dify Community Edition and Dify Cloud, or documented any limitation below.
• The package contains only files needed at runtime.
• The package does not contain secrets, local credentials, .env files, .git directories, virtual environments, caches, logs, or IDE files.
• The package does not contain executables or bundled binaries, or I explained why they are required below.
• The plugin README includes setup steps, usage instructions, required APIs or credentials, connection requirements, and the source repository link.
• The plugin includes PRIVACY.md or a hosted privacy policy, and manifest.yaml references it.
• All user-facing text is primarily in English, with any localized README files following the i18n guidance.

Security and privacy notes

This is high risk because it triggers Figranium browser-automation tasks.

The plugin itself only calls the administrator-configured Figranium base URL. It sends the Figranium API key, task ID, and optional runtime variable overrides to that server. It does not include telemetry, analytics, persistent storage, arbitrary network fetching, bundled executables, or direct filesystem/command execution.

A Figranium task may browse URLs and process data according to its own task definition. Administrators should enable only trusted tasks, scope API keys appropriately, and restrict access to the Figranium server.

Local validation

Completed with Python 3.12 and Dify Plugin SDK 0.10.2:

uv run pytest -q
12 passed

uv run ruff check .
All checks passed

uv run ruff format --check .
All files already formatted

Dify Plugin SDK manifest schema validation
Manifest schema validation passed

dify plugin package . --output_path /tmp/figranium-0.0.1.difypkg
Plugin packaged successfully

The resulting package was inspected to confirm it excludes tests, virtual environments, caches, and other development state.

Reviewer notes

• The plugin is intentionally focused on executing existing Figranium tasks and listing task summaries.
• Task authoring, scheduling, execution history, browser sessions, and inspector functionality are deliberately excluded.
• No breaking changes; this is the initial release.