Skip to content

Creating the Plugin

Every plugin starts on the Plugin Dev screen. Open it from the Rogue Architect sidebar — it lists everything you can edit (your authored plugins, plus anything your team or the wider community shared with you) grouped by ownership.

Plugin Development screen showing search bar with plugin category filters, Recent / My Plugins / RogueLabsTeam / Rogue Labs / Community sections, and an Add new Plugin button top right Plugin Dev — your authored plugins, your team’s plugins, Rogue Labs official plugins, and community-shared plugins, all in one searchable view.

From here you have two ways to create a new plugin.

Click Add new Plugin at the top right. You’ll land in the editor with an empty YAML buffer, blank metadata, and no parameters. Use this when:

  • You’re writing something brand new that doesn’t resemble anything in the catalog
  • You want full control over every parameter, every task, every default
  • You’d rather build up than tear down

The blank slate is honest but slow. Most plugins don’t deserve to start from zero — there’s almost always a closer cousin in the catalog you can fork.

Find a published plugin that does something close to what you want and clone it. The plugin category dropdown maps each plugin to one of six types, and scanning the catalog by category is the fastest way to find a starting point:

  • action — workflow steps and machine-state changes (Auto-Log User, Set UI Performance Mode, Restart Windows Machine, Join Domain)
  • role — server roles and AD topology (Domain Controller, Child DC, DNS Server, Add Users to Group)
  • application — installers and configured software (Notepad++, VLC, Office, Visual Studio, browsers)
  • vulnerability — planted weaknesses (kerberoastable accounts, weak ACLs, exposed credentials, misconfigurations)
  • attack — offensive tooling for red-team boxes (Kali installers, C2 frameworks, redirectors, recon kits)
  • defense — blue-team tooling (EDR/AV agents, log forwarders, SIEM components, monitoring stacks)

To clone, click any plugin you can see in the Plugin Dev list, then use Clone from the more menu (the next to the version dropdown). You get a fresh copy of the YAML, metadata, parameters, and vault contents — change one thing at a time and run a test build between edits.

Cloning is faster for almost everything. A reference plugin already encodes the patterns Rogue Arena expects (no playbook header, vault staging, validation tasks, idempotency guards). Starting from one of those is closer to correct than starting blank.

Once the plugin opens, the rest of the work lives in three places: