CrowdStrike

CrowdStrike/falcon-mcp

MCP server Claude CodeCodexCursor +2

CrowdStrike Falcon MCP Server. Runs locally from the falcon-mcp Python package. Needs 12 environment variables to run.

CrowdStrike/foundry-skills

Plugin Claude Code

AI coding assistant skills for building CrowdStrike Falcon Foundry apps.

CrowdStrike/foundry-skills

Plugin Claude Code

CrowdStrike Falcon Foundry development skills for building cybersecurity applications on the Falcon platform. Includes UI development, collections, functions, workflows, API integration, security patterns, and debugging workflows. Swagger 2.0 specs are auto-converted to OpenAPI 3.0 via npx swagger2openapi (requires…

CrowdStrike/foundry-skills

Cursor rule Cursor

See AGENTS.md for project context and contribution conventions. For Foundry skill details, start with skills/development-workflow/SKILL.md.

CrowdStrike/foundry-skills

Instructions file GitHub Copilot

Instructions for CrowdStrike/foundry-skills: See AGENTS.md for AI coding assistant instructions for this repository.

CrowdStrike/foundry-skills

Instructions file CodexOpenCode

Instructions for CrowdStrike/foundry-skills, covering ai agent instructions for foundry-skills, prerequisites, repository structure, skills ecosystem and core principles.

CrowdStrike/foundry-skills

Instructions file

Instructions for CrowdStrike/foundry-skills, covering claude.md, plugin hook behavior, automated safety enforcement, skills integration with claude code workflows and counter-rationalizations.

CrowdStrike/foundry-skills

Hook

Runs when a session starts, executing foundry-session-start.sh. From CrowdStrike/foundry-skills.

CrowdStrike/foundry-skills

Hook

Runs when you submit a prompt, before the agent sees it, executing foundry-skill-router.sh. From CrowdStrike/foundry-skills.

CrowdStrike/foundry-skills

Hook

Runs before the agent uses a tool for Bash and Skill tool calls, executing foundry-skill-router.sh, foundry-cli-guard.sh and superpowers-foundry-bridge.sh (3 commands). From CrowdStrike/foundry-skills.

CrowdStrike/foundry-skills

Skill Claude CodeCodex

Expose external APIs to Falcon Foundry via OpenAPI specs. TRIGGER when user asks to "create an API integration", "adapt an OpenAPI spec for Foundry", "expose an API to workflows", "connect to a third-party API", or runs foundry api-integrations create. Also trigger when user has an OpenAPI/Swagger spec and wants it…

CrowdStrike/foundry-skills

Skill Claude CodeCodex

Design JSON Schema collections and CRUD patterns for Falcon Foundry apps. TRIGGER when user asks to "create a collection", "define a JSON schema", "store data in Foundry", runs foundry collections create, or needs help with indexable fields, FQL queries, or collection access patterns. DO NOT TRIGGER for workflow YAML…

CrowdStrike/foundry-skills

Skill Claude CodeCodex

Systematic troubleshooting for Falcon Foundry CLI errors, manifest validation failures, deploy failures, artifact runtime errors, and development server issues. TRIGGER when user encounters CLI errors, foundry ui run not working, deploy failures, authentication issues, function execution failures, "debug my function"…

CrowdStrike/foundry-skills

Skill Claude CodeCodex

Orchestrates the complete Falcon Foundry app lifecycle from requirements through deployment. TRIGGER when user asks to "create a Foundry app", "build a Foundry app", "plan a Foundry app", runs any foundry apps CLI command, or discusses Foundry app architecture. DO NOT TRIGGER when user is working on a specific…

CrowdStrike/foundry-skills

Skill Claude CodeCodex

End-to-end testing for Falcon Foundry apps using Playwright and @crowdstrike/foundry-playwright. TRIGGER when user asks to "add e2e tests", "add playwright tests", "write end-to-end tests", "test my app", or mentions "e2e", "playwright", or "end-to-end" in the context of testing a Foundry app. DO NOT TRIGGER during…

CrowdStrike/foundry-skills

Skill Claude CodeCodex

Build serverless Go or Python functions for Falcon Foundry apps. TRIGGER when user asks to "create a function", "write a serverless function", "build backend logic", runs foundry functions create, or needs help with FDK handler patterns, function testing, or collection integration from functions. Also TRIGGER when…

CrowdStrike/foundry-skills

Skill Claude CodeCodex

Call CrowdStrike Falcon platform APIs (detections, alerts, hosts, RTR) from within Foundry function handlers. TRIGGER when user asks to "call Falcon APIs from a function", "use FalconPy in a function", "use gofalcon in a function", or needs to integrate Falcon platform APIs within serverless function code. DO NOT…

CrowdStrike/foundry-skills

Skill Claude CodeCodex

TRIGGER when user asks for a "standalone Falcon Fusion workflow" that needs NO Foundry app — just a trigger plus actions that already exist in their CID, with no UI, function, collection, or custom API integration to build. DO NOT TRIGGER when the request needs anything built (a custom action, a UI page, a function, a…

CrowdStrike/foundry-skills

Skill Claude CodeCodex

Security patterns for Falcon Foundry apps including OAuth scopes, RBAC, input validation, UI security, and credential management. TRIGGER when user asks to "configure OAuth scopes", "secure a Foundry app", "handle secrets", "add input validation", or needs to review a Foundry app for security concerns (XSS, CSP…

CrowdStrike/foundry-skills

Skill Claude CodeCodex

Build UI pages and extensions for Falcon Foundry apps using React or Vue with the Shoelace design system and Foundry-JS. TRIGGER when user asks to "create a UI page", "build a UI extension", "add a Shoelace component", "call an API from the UI", runs foundry ui pages create or foundry ui run, or needs help with Vite…

CrowdStrike/foundry-skills

Skill Claude CodeCodex

Create and configure Falcon Fusion SOAR workflow YAML for Falcon Foundry apps. TRIGGER when user asks to "create a workflow", "build an automation", "configure Fusion SOAR", "add an on-demand workflow", runs foundry workflows create, or needs help with Fusion YAML syntax, triggers, actions, or variable references. DO…

CrowdStrike/fusion-skills

Plugin Claude Code

AI coding assistant skills for building CrowdStrike Falcon Fusion workflows.

CrowdStrike/fusion-skills

Plugin Claude Code

CrowdStrike Falcon Fusion skills for authoring, deploying, and executing Fusion workflows. Includes live action discovery, YAML authoring with schema validation, workflow import and release, execution monitoring, and Falcon Next-Gen SIEM lookup files.

CrowdStrike/fusion-skills

Instructions file GitHub Copilot

Instructions for CrowdStrike/fusion-skills: See AGENTS.md for AI coding assistant instructions for this repository.