crowdstrike-falcon-foundry

Q: How to install crowdstrike-falcon-foundry?

Create the skills directory: mkdir -p .claude/skills. Then run: mkdir -p .claude/skills && curl -o .claude/skills/crowdstrike-falcon-foundry.md https://raw.githubusercontent.com/CrowdStrike/foundry-skills/main/SKILL.md. Finally, /crowdstrike-falcon-foundry in Claude Code.

Q: What is crowdstrike-falcon-foundry best for?

crowdstrike-falcon-foundry is categorized under General. It covers: security, api.

New

16Official PluginGeneralby CrowdStrike

CrowdStrike Falcon Foundry development skills for building cybersecurity applications on the Falcon platform. Includes UI development, collections, functions, workflows, API integration, security patterns, and debugging workflows.

Shell1 forks1 issuesUpdated 6/12/2026First seen 5/22/2026

Summary

This skill equips developers with tools and patterns for building cybersecurity applications on the CrowdStrike Falcon Foundry platform.

It covers UI development, collections, functions, workflows, API integration, security patterns, and debugging workflows, enabling rapid development of custom security solutions.

Install & Usage

Create the skills directory

mkdir -p .claude/skills

Download the skill file

mkdir -p .claude/skills && curl -o .claude/skills/crowdstrike-falcon-foundry.md https://raw.githubusercontent.com/CrowdStrike/foundry-skills/main/SKILL.md

Invoke in Claude Code

/crowdstrike-falcon-foundry

Use Cases

Build a custom Falcon UI widget to display real-time threat intelligence data.

Create a serverless function that processes Falcon detection events and triggers automated responses.

Develop a workflow that orchestrates multiple Falcon APIs to triage and remediate incidents.

Integrate Falcon Foundry collections to store and query security telemetry for custom analytics.

Debug a Falcon Foundry application by inspecting logs and tracing API calls.

Implement secure authentication patterns for a Falcon Foundry plugin using OAuth2.

Usage Examples

/crowdstrike-falcon-foundry Create a new Falcon Foundry collection schema for storing endpoint detection events.

/crowdstrike-falcon-foundry Build a workflow that uses the Falcon API to automatically isolate a host when a critical alert is triggered.

Debug my Falcon Foundry function that processes detection events; it's failing with a timeout error.

View source on GitHub

securityapiclaude-codeclaude-code-pluginfalcon-foundry

Security Audits

LicenseUnknownSourcePassRepositoryPass

Frequently Asked Questions

What is crowdstrike-falcon-foundry?

This skill equips developers with tools and patterns for building cybersecurity applications on the CrowdStrike Falcon Foundry platform. It covers UI development, collections, functions, workflows, API integration, security patterns, and debugging workflows, enabling rapid development of custom security solutions.

How to install crowdstrike-falcon-foundry?

To install crowdstrike-falcon-foundry: create the skills directory (mkdir -p .claude/skills), then run: mkdir -p .claude/skills && curl -o .claude/skills/crowdstrike-falcon-foundry.md https://raw.githubusercontent.com/CrowdStrike/foundry-skills/main/SKILL.md. Finally, /crowdstrike-falcon-foundry in Claude Code.

What is crowdstrike-falcon-foundry best for?

crowdstrike-falcon-foundry is a skill categorized under General. It is designed for: security, api. Created by CrowdStrike.

What can I use crowdstrike-falcon-foundry for?

crowdstrike-falcon-foundry is useful for: Build a custom Falcon UI widget to display real-time threat intelligence data.; Create a serverless function that processes Falcon detection events and triggers automated responses.; Develop a workflow that orchestrates multiple Falcon APIs to triage and remediate incidents.; Integrate Falcon Foundry collections to store and query security telemetry for custom analytics.; Debug a Falcon Foundry application by inspecting logs and tracing API calls.; Implement secure authentication patterns for a Falcon Foundry plugin using OAuth2..