mitre / skeleton

A CALDERA Plugin Template

MITRE Caldera Plugin: Skeleton

Skeleton is a Caldera plugin template

Run the plugin-init.py script to easily create a new plugin

python plugin-init.py 

skeleton's Issues

Plugin name validation should be more strict

What problem are you trying to solve? Please describe.

Eg. I'm always frustrated when [...]

A plugin does not get loaded into MITRE CALDERA when the plugin name contains "." or "/".
The current code checks only that the plugin name does not contain spaces.

The ideal solution: What should the feature should do?

a clear and concise description

I strongly recommend for the plugin names to follow the "identifier" syntax
and use of name.isidentifier() to validate the plugin name more strictly.
(c.f. https://docs.python.org/3/reference/lexical_analysis.html#identifiers)

What category of feature is this?

• UI/UX
• API
• Other

If you have code or pseudo-code please provide:

Current code:

def is_valid_plugin_name(name):
    if len(name.split(' ')) == 1:
        return True
    return False

Suggested code:

def is_valid_plugin_name(name):
    return name.isidentifier()

• Willing to submit a pull request to implement this feature?

Additional context

Add any other context or screenshots about the feature request here.

Nothing.

How should I use the Caldera API from the plugin code?

From the official documentation I saw that to get the list of skills we use this line of code:

• abilities = await self.services.get('data_svc').locate('abilities')

I need to create an Adversary profile and an operation from the plugin code, what should I do?