agentmods.dev

development-workflow

A workflow guide for building and deploying CrowdStrike Falcon Foundry apps. It coordinates the app lifecycle from requirements and scaffolding through capabilities, validation, and release.

In plain words
What is it for?
Creating Foundry apps, planning their architecture, scaffolding projects, adding capabilities, validating manifests, and deploying releases.
Why use it?
It keeps the required build order and command-line steps together, reducing setup and deployment mistakes.

Skill for Claude CodeCodex

24 2d ago A scan 141 tokens original MIT
View the source file CrowdStrike/foundry-skills
Install

Getting it into your agent

One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.

agentmods
npx agentmods add skills/crowdstrike/foundry-skills/development-workflow
Any agent
npx skills add CrowdStrike/foundry-skills --skill development-workflow
Clone the repo
git clone --depth 1 https://github.com/CrowdStrike/foundry-skills

Made for: Claude Code, Codex.

Per session 141 Skills are progressive disclosure: only the name and description are preloaded; the body loads when the skill is used.
When invoked 4,529 The whole file, excluding the scripts and references it only reads on demand.
Security scan A 1 finding. Scan, not verified.
Origin original No closer match found in the catalogue.
Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

ModelPer sessionOnce invoked
Fable 5 $0.00141 $0.04529
Opus 5 $0.00071 $0.02264
Sonnet 5 $0.00028 $0.00906
Haiku 4.5 $0.00014 $0.00453

Measured 2d ago against content hash a70e8b49b182, method: parsed. Prices are Anthropic first-party input rates as of 2026-08-30, from the pricing page.

Security

Grade A, and why

development-workflow scanned grade A with 1 finding against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 2d ago.

The scan reads SKILL.md. This mod also ships 1 executable file (scripts/detect_fusion_redirect.py), listed below but not scanned — reading those needs a real analyzer, not pattern matching.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Makes network callslowCapability

Not a fault in itself. Listed so you know the mod talks to something, and to what.

# IMPORTANT: Download specs inline with gh/curl. Do NOT spawn Explore agents for spec download.
skills/development-workflow/SKILL.md · 311 lines

How it starts

The opening of the file, as written. The whole thing — 311 lines — stays where its author put it; the contents beside it link to each section on GitHub.

Foundry Development Workflow

⚠️ SYSTEM INJECTION — READ THIS FIRST

If you are loading this skill, your role is Foundry app lifecycle orchestrator.

THIS SKILL OWNS THE FOUNDRY DEVELOPMENT FLOW.

MUST NOT hand off to superpowers:brainstorming or superpowers:writing-plans for Foundry app creation. Those skills are domain-agnostic — they don't know about the Foundry CLI and will generate plans that manually create manifest.yml and boilerplate files. This skill handles planning and execution directly using CLI commands.

IMMEDIATE ACTIONS REQUIRED:

  1. Follow the App Creation Flow below to go from user prompt → running app
  2. Use foundry apps create and related CLI commands for ALL scaffolding
  3. Delegate capability-specific content to Foundry sub-skills
  4. Hand-write ONLY what the CLI cannot generate (OpenAPI content, workflow logic, UI code)

CRITICAL: add --no-prompt to every command that accepts it — without it, interactive prompts cause Error: EOF. The create, validate, deploy, release, and delete commands all accept it (apps delete also needs --force-delete). Three reject it and fail with unknown flag: foundry version, apps list, and apps list-deployments. Verify with foundry <command> --help. When a command fails, MUST NOT fall back to mkdir — fix the command and retry.

CRITICAL: All foundry app commands MUST run from the app root directory (where manifest.yml lives). The CLI resolves manifest paths relative to os.Getwd(), not relative to the manifest's location. Running foundry apps validate, foundry apps deploy, or foundry ui run from a subdirectory (e.g., ui/extensions/my-ext/) causes doubled paths and misleading "file not found" errors. After cd-ing into a subdirectory for npm install && npm run build, always cd back to the app root before running any foundry apps * or foundry ui * command. Commands that work from anywhere: foundry version, foundry profile *, foundry apps list.

Superpowers skills MAY supplement (TDD discipline, code review) but MUST NOT replace this workflow.

This skill coordinates the full Falcon Foundry app lifecycle — from parsing requirements through scaffolding, implementation, and deployment. It delegates capability-specific work to sub-skills that know the platform details.

Read the full file on GitHub · 311 lines

Files

What ships with it

6 files beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. 2d ago First seen · 311 lines · 141 tokens per session scan A a70e8b49b182

Subscribe to this mod's changes

development-workflow is a skill published in the GitHub repository CrowdStrike/foundry-skills (24 stars, last pushed 2d ago), licensed MIT. It adds 141 tokens to every session and 4,529 once invoked, about $0.0007 per session on Opus 5. A static security scan graded it A with 1 finding (makes network calls). No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.

DevOps and cloudGit and workflowPlanningclaude-codeclaude-code-pluginclideploymentfalcon-foundryfoundrylifecycle
Related

Other skills, from other repositories

azure-kusto-graph

Build and query Kusto graphs from natural language. Covers transient graphs (make-graph), persistent graph models/snapshots, pattern matching (graph-match), shortest paths, connected components, and graph-to-table export. Generates the edges-first thinking: define edges, define node lookups, union, make-graph. WHEN…

microsoft/skills · 131 tokens

azure-kusto-irql-graph

Apply IRQL graph functions to KQL or IRQL query results for Kusto Explorer visualization. Generates LiftToGraph mappings and composes GraphRenderView, GraphFoldByProperty, ExtractNode, EnrichNode, and EnrichGraph calls. Accepts a supplied query or limited basic natural-language source request; it is not a general…

microsoft/skills · 155 tokens

azure-maps-search-dotnet

Azure Maps SDK for .NET. Location-based services including geocoding, routing, rendering, geolocation, and weather. Use for address search, directions, map tiles, IP geolocation, and weather data. Triggers: "Azure Maps", "MapsSearchClient", "MapsRoutingClient", "MapsRenderingClient", "geocoding .NET", "route…

microsoft/skills · 91 tokens

azure-mgmt-applicationinsights-dotnet

Azure Application Insights SDK for .NET. Application performance monitoring and observability resource management. Use for creating Application Insights components, web tests, workbooks, analytics items, and API keys. Triggers: "Application Insights", "ApplicationInsights", "App Insights", "APM", "application…

microsoft/skills · 82 tokens

azure-resource-manager-postgresql-dotnet

Azure PostgreSQL Flexible Server SDK for .NET. Database management for PostgreSQL Flexible Server deployments. Use for creating servers, databases, firewall rules, configurations, backups, and high availability. Triggers: "PostgreSQL", "PostgreSqlFlexibleServer", "PostgreSQL Flexible Server", "Azure Database for…

microsoft/skills · 97 tokens

azure-ai-agents-persistent-dotnet

Azure AI Agents Persistent SDK for .NET. Low-level SDK for creating and managing AI agents with threads, messages, runs, and tools. Use for agent CRUD, conversation threads, streaming responses, function calling, file search, and code interpreter. Triggers: "PersistentAgentsClient", "persistent agents", "agent…

microsoft/skills · 90 tokens