CrowdStrike

CrowdStrike/fusion-skills

Instructions file CodexOpenCode

Instructions for CrowdStrike/fusion-skills, covering agents.md, what this is, prerequisites, repository structure and skills ecosystem.

CrowdStrike/fusion-skills

Instructions file

Instructions for CrowdStrike/fusion-skills, covering claude.md, plugin hook behavior, counter-rationalizations and skills integration.

CrowdStrike/fusion-skills

Instructions file Gemini CLI

Instructions for CrowdStrike/fusion-skills, a project described as: AI coding assistant skills for building CrowdStrike Falcon Fusion workflows: action discovery, YAML authoring, deployment, execution monitoring, and best practices for triggers, conditions, loops, and HTTP Actions.

CrowdStrike/fusion-skills

Hook

Runs when a session starts, executing bootstrap.sh. From CrowdStrike/fusion-skills.

CrowdStrike/fusion-skills

Hook

Runs when you submit a prompt, before the agent sees it, executing fusion-skill-router.sh. From CrowdStrike/fusion-skills.

CrowdStrike/fusion-skills

Hook

Runs before the agent uses a tool for Skill tool calls, executing fusion-skill-router.sh and fusion-foundry-bridge.sh (2 commands). From CrowdStrike/fusion-skills.

CrowdStrike/fusion-skills

Skill Claude CodeCodex

Discover Falcon Fusion actions via live API, author workflow YAML with correct schema, validate against Charlotte JSON schema, and use templates/examples. TRIGGER when user asks to write workflow YAML, find actions, validate a workflow, use CEL expressions, or needs action discovery. DO NOT TRIGGER for deploying…

CrowdStrike/fusion-skills

Skill Claude CodeCodex

Import, release, and manage Falcon Fusion workflow definitions in a CID. TRIGGER when user asks to import a workflow, release a workflow version, list existing workflows, check for duplicates, or manage workflow definitions. DO NOT TRIGGER for writing YAML (use authoring), executing workflows, or monitoring (use…

CrowdStrike/fusion-skills

Skill Claude CodeCodex

Trigger Falcon Fusion workflows, monitor execution status, and debug failures. TRIGGER when user asks to run a workflow, check execution status, tail logs, get execution results, or debug a workflow failure. DO NOT TRIGGER for writing YAML (use authoring) or importing/releasing workflows (use deployment).

CrowdStrike/fusion-skills

Skill Claude CodeCodex

TRIGGER when the user asks to "build a Foundry app", "create a Foundry app", mentions manifest.yml, or needs a UI page/extension, serverless function, collection, or a custom API integration from a third-party API (Okta, ServiceNow, Jira, etc.) built. DO NOT TRIGGER for a standalone Fusion workflow that only wires…

CrowdStrike/fusion-skills

Skill Claude CodeCodex

Manage Falcon Next-Gen SIEM lookup files (CSV/JSON/TXT) for CQL match() queries. TRIGGER when user asks to create, list, update, or delete lookup files, or needs help with CQL match() function. DO NOT TRIGGER for Fusion workflows, action discovery, or workflow deployment — use the workflows/authoring/deployment skills.

CrowdStrike/fusion-skills

Skill Claude CodeCodex

Configure CrowdStrike Falcon API credentials for the fusion-skills plugin. TRIGGER when user asks to set up credentials, configure API access, or runs into authentication errors.

CrowdStrike/fusion-skills

Skill Claude CodeCodex

Orchestrates the full Falcon Fusion workflow lifecycle from discovery through deployment and execution. TRIGGER when user asks to "create a Fusion workflow", "build a Fusion playbook", "automate CrowdStrike actions", or mentions Fusion workflows without specifying a sub-task. DO NOT TRIGGER when user is working in a…

CrowdStrike/crowdstrike-mcp-skills

Plugin Claude Code

Plugin marketplace listing 1 plugin: crowdstrike-mcp.

CrowdStrike/crowdstrike-mcp-skills

Plugin Claude Code

Configure the CrowdStrike Falcon MCP server with OAuth2 authentication using client credentials.

CrowdStrike/crowdstrike-mcp-skills

Skill Claude CodeCodex

Set up the CrowdStrike Falcon MCP server. Checks for required credentials, runs mcp-server-setup.sh to detect the correct regional URL and write .mcp.json, then confirms successful installation.