Plugin Studio

Build, test, and package custom security extensions for Shadow313 NEXUS | Developer Lab

Plugin Architecture SDK v2

Hook Points

HMAC-SHA256

Signing Algorithm

Sandboxed

Execution Mode

Available Hook Points Lifecycle Hooks

recon.post

Fires after recon module completes. Receives full recon result dict. Use for custom enrichment, threat scoring, or external API calls.

vuln.post

Fires after vulnerability analysis. Receives CVE list with EPSS/KEV data. Use for custom risk scoring or ticketing integration.

network.post

Fires after network analysis. Receives PCAP summary, flow data, anomaly scores. Use for custom alerting or SIEM forwarding.

session.close

Fires when session ends. Receives full session artifact bundle. Use for report generation or data archival.

Quick Start — Build Your First Plugin 5 min setup

# 1. Create plugin manifest
cat > my_plugin/plugin.json << 'EOF'
{"id": "my-plugin", "version": "1.0.0", "hooks": ["recon.post"]}
EOF
# 2. Write plugin logic
def on_recon_post(result, session):
    print(f"Recon complete: {result['target']}")
    return result
# 3. Sign and install
shadow313 plugin --sign my_plugin/
shadow313 plugin --install my_plugin/