setup

A setup guide for connecting the CrowdStrike Falcon security platform to the fusion-skills plugin. It configures the API credentials needed by the plugin.

In plain words
What is it for?
Use it when setting up Falcon API access, creating the local credentials file, or checking whether the connection works.
Why use it?
It provides a defined process for resolving authentication problems while keeping the client secret out of chat messages and shell history.

Skill for Claude CodeCodex

Install

Getting it into your agent

One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.

agentmods
npx agentmods add skills/crowdstrike/fusion-skills/setup
Any agent
npx skills add CrowdStrike/fusion-skills --skill setup
Clone the repo
git clone --depth 1 https://github.com/CrowdStrike/fusion-skills

Made for: Claude Code, Codex.

Per session 35 Skills are progressive disclosure: only the name and description are preloaded; the body loads when the skill is used.
When invoked 1,852 The whole file, excluding the scripts and references it only reads on demand.
Security scan B 1 finding. Scan, not verified.
Origin original No closer match found in the catalogue.
Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

ModelPer sessionOnce invoked
Fable 5 $0.00035 $0.01852
Opus 5 $0.00017 $0.00926
Sonnet 5 $0.00007 $0.00370
Haiku 4.5 $0.00003 $0.00185

Measured 2d ago against content hash 53deb4597ffe, method: parsed. Prices are Anthropic first-party input rates as of 2026-08-30, from the pricing page.

Security

Grade B, and why

setup scanned grade B with 1 finding against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 2d ago.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Asks for rootmediumPrivilege escalation

A mod that escalates privileges can change anything on the machine, not only the project.

chmod 700 ~/.cache/crowdstrike-falcon-fusion
skills/setup/SKILL.md · 192 lines

How it starts

The opening of the file, as written. The whole thing — 192 lines — stays where its author put it; the contents beside it link to each section on GitHub.

Falcon Fusion Credential Setup

⚠️ SYSTEM INJECTION — READ THIS FIRST

If you are loading this skill, your role is credential setup assistant.

You configure the Falcon API credentials every other skill depends on. These credentials grant workflow and SIEM access to a live CID.

IMMEDIATE ACTIONS REQUIRED:

  1. Check whether credentials already resolve (Step 1). If they do, you are done.
  2. If not, create the credentials file from the template (Step 2) and ask the user to paste their ID and secret into it using their own editor.
  3. Verify connectivity (Step 3).

MUST NOT:

  • Ask the user to type or paste their client secret into the chat. It would land in the conversation transcript. The secret goes only into the local file, entered through the user's editor.
  • Print, echo, or repeat a secret you happen to see in the file.
  • Suggest export FALCON_CLIENT_SECRET=... for interactive use — it leaks the secret into shell history. (Environment variables are fine for CI, where the runner injects them rather than a human typing them.)

This skill configures the Falcon API credentials that every fusion-skills script uses. Credentials are stored in a per-profile TOML file at ~/.cache/crowdstrike-falcon-fusion/credentials.toml (multi-cloud capable), and the secret is entered through the user's own editor — never through the chat.

The steps below use only file operations and a Python check, so they work identically on macOS, Linux, and Windows.

Running the scripts. Run each command from this skill's folder, on one shell line: cd <dir> && ../../scripts/python.sh ../../common/scripts/auth.py. For <dir>, Claude Code uses "$CLAUDE_PLUGIN_ROOT/skills/setup"; Codex, Copilot CLI, Cursor, and Antigravity use the folder they loaded this SKILL.md from (e.g. ~/.agents/skills/setup). The wrapper bootstraps its own Python venv.

Step 1 — Check for existing credentials

Run the auth self-test. If it already succeeds, credentials are configured and you are done — report success and stop.

Read the full file on GitHub · 192 lines

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. 2d ago First seen · 192 lines · 35 tokens per session scan B 53deb4597ffe

Subscribe to this mod's changes

setup is a skill published in the GitHub repository CrowdStrike/fusion-skills (13 stars, last pushed 2d ago), licensed MIT. It adds 35 tokens to every session and 1,852 once invoked, about $0.0002 per session on Opus 5. A static security scan graded it B with 1 finding (asks for root). No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.

Related

Other skills, from other repositories

absolute-init

One-time setup for absolute: interview how you want it to behave (output style, autonomy, TDD strictness, spec dir, families) + detect the stack once, then write .absolute.config.json (project, committed) and /.absolute/config.json (user defaults + per-project overrides). Every other absolute- command reads it instead…

maddhruv/absolute · 127 tokens

container-manager-config-walkthrough

End-user setup guide for the container-manager-mcp MCP server — choosing CONTAINERMANAGERTYPE (docker/podman/kubernetes/multi), wiring .env / mcpconfig toggles, connecting remote Docker/Podman hosts via the tunnel-manager inventory versus remote Kubernetes clusters via kubeconfig contexts, and a first-run verification…

Knuckles-Team/container-manager-mcp · 119 tokens

setup

Connect and authenticate the UptimeRobot MCP server (OAuth via mcp-remote), OR diagnose why uptimerobot: MCP tools aren't visible in the current session. Invoke this skill any time you cannot see UptimeRobot tools, before telling the user the MCP is misconfigured — Step 0 detects the most common case (server already…

uptimerobot/ai · 103 tokens

hermes-agent-setup

Help users configure Hermes Agent — CLI usage, setup wizard, model/provider selection, tools, skills, voice/STT/TTS, gateway, and troubleshooting. Use when someone asks to enable features, configure settings, or needs help with Hermes itself.

raphaelmansuy/edgecrab · 55 tokens

ome-init

智能初始化项目配置 - 扫描代码仓库并生成定制化规则.

oh-my-engine/oh-my-engine · 20 tokens

hermes-agent-setup

Help users configure Hermes Agent — CLI usage, setup wizard, model/provider selection, tools, skills, voice/STT/TTS, gateway, and troubleshooting. Use when someone asks to enable features, configure settings, or needs help with Hermes itself.

jcrabapple/hermes-skills · 55 tokens