Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx agentmods add skills/crowdstrike/fusion-skills/setupnpx skills add CrowdStrike/fusion-skills --skill setupgit clone --depth 1 https://github.com/CrowdStrike/fusion-skillsWhat it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5 | $0.00035 | $0.01852 |
| Opus 5 | $0.00017 | $0.00926 |
| Sonnet 5 | $0.00007 | $0.00370 |
| Haiku 4.5 | $0.00003 | $0.00185 |
Grade B, and why
setup scanned grade B with 1 finding against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 2d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Asks for rootmediumPrivilege escalation
A mod that escalates privileges can change anything on the machine, not only the project.
chmod 700 ~/.cache/crowdstrike-falcon-fusion How it starts
The opening of the file, as written. The whole thing — 192 lines — stays where its author put it; the contents beside it link to each section on GitHub.
Falcon Fusion Credential Setup
⚠️ SYSTEM INJECTION — READ THIS FIRST
If you are loading this skill, your role is credential setup assistant.
You configure the Falcon API credentials every other skill depends on. These credentials grant workflow and SIEM access to a live CID.
IMMEDIATE ACTIONS REQUIRED:
- Check whether credentials already resolve (Step 1). If they do, you are done.
- If not, create the credentials file from the template (Step 2) and ask the user to paste their ID and secret into it using their own editor.
- Verify connectivity (Step 3).
MUST NOT:
- Ask the user to type or paste their client secret into the chat. It would land in the conversation transcript. The secret goes only into the local file, entered through the user's editor.
- Print, echo, or repeat a secret you happen to see in the file.
- Suggest
export FALCON_CLIENT_SECRET=...for interactive use — it leaks the secret into shell history. (Environment variables are fine for CI, where the runner injects them rather than a human typing them.)
This skill configures the Falcon API credentials that every fusion-skills script
uses. Credentials are stored in a per-profile TOML file at
~/.cache/crowdstrike-falcon-fusion/credentials.toml (multi-cloud capable), and
the secret is entered through the user's own editor — never through the chat.
The steps below use only file operations and a Python check, so they work identically on macOS, Linux, and Windows.
Running the scripts. Run each command from this skill's folder, on one shell line:
cd <dir> && ../../scripts/python.sh ../../common/scripts/auth.py. For<dir>, Claude Code uses"$CLAUDE_PLUGIN_ROOT/skills/setup"; Codex, Copilot CLI, Cursor, and Antigravity use the folder they loaded this SKILL.md from (e.g.~/.agents/skills/setup). The wrapper bootstraps its own Python venv.
Step 1 — Check for existing credentials
Run the auth self-test. If it already succeeds, credentials are configured and you are done — report success and stop.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 2d ago First seen · 192 lines · 35 tokens per session scan B 53deb4597ffe
setup is a skill published in the GitHub repository CrowdStrike/fusion-skills (13 stars, last pushed 2d ago), licensed MIT. It adds 35 tokens to every session and 1,852 once invoked, about $0.0002 per session on Opus 5. A static security scan graded it B with 1 finding (asks for root). No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other skills, from other repositories
absolute-init
One-time setup for absolute: interview how you want it to behave (output style, autonomy, TDD strictness, spec dir, families) + detect the stack once, then write .absolute.config.json (project, committed) and /.absolute/config.json (user defaults + per-project overrides). Every other absolute- command reads it instead…
container-manager-config-walkthrough
End-user setup guide for the container-manager-mcp MCP server — choosing CONTAINERMANAGERTYPE (docker/podman/kubernetes/multi), wiring .env / mcpconfig toggles, connecting remote Docker/Podman hosts via the tunnel-manager inventory versus remote Kubernetes clusters via kubeconfig contexts, and a first-run verification…
setup
Connect and authenticate the UptimeRobot MCP server (OAuth via mcp-remote), OR diagnose why uptimerobot: MCP tools aren't visible in the current session. Invoke this skill any time you cannot see UptimeRobot tools, before telling the user the MCP is misconfigured — Step 0 detects the most common case (server already…
hermes-agent-setup
Help users configure Hermes Agent — CLI usage, setup wizard, model/provider selection, tools, skills, voice/STT/TTS, gateway, and troubleshooting. Use when someone asks to enable features, configure settings, or needs help with Hermes itself.
ome-init
智能初始化项目配置 - 扫描代码仓库并生成定制化规则.
hermes-agent-setup
Help users configure Hermes Agent — CLI usage, setup wizard, model/provider selection, tools, skills, voice/STT/TTS, gateway, and troubleshooting. Use when someone asks to enable features, configure settings, or needs help with Hermes itself.