[External Plugin]: CrowdStrike Falcon Foundry

[mraible]

Plugin name

crowdstrike-falcon-foundry

Short description

AI coding assistant skills for building CrowdStrike Falcon Foundry apps: scaffolding, deployment, and best practices for API integrations, collections, functions, UI extensions, UI pages, and workflows.

GitHub repository

CrowdStrike/foundry-skills

Plugin path inside the repository

No response

Ref to review

Commit SHA to review

d9af175fe2b86836b431ebdb7e088957e6c7820d

Version

1.5.0

License identifier

MIT

Author name

CrowdStrike

Author URL

https://www.crowdstrike.com/

Homepage URL

No response

Keywords

foundry
crowdstrike
cybersecurity
falcon
security

Additional notes for reviewers

We're listed in Anthropic's marketplace, as well as Cursor, and would love to be in yours!

Submission checklist

• The plugin lives in a public GitHub repository.
• The ref and/or sha I provided is immutable (release tag and/or full 40-character commit SHA), not a branch.
• This submission follows this repository's contribution, security, and responsible AI policies.
• This plugin is not already listed in the Awesome Copilot marketplace.

[github-actions]

🟡 Contributor Reputation Check: MEDIUM risk

Check	Risk
Profile	MEDIUM
Credential audit	NONE

Maintainers: please review this contributor before merging.
See the workflow run for full details.
Automated check powered by AGT.

[github-actions]

✅ External plugin intake passed

This submission passed automated intake validation and quality checks and is ready for maintainer review.

• Plugin: crowdstrike-falcon-foundry

• Repository: https://github.com/CrowdStrike/foundry-skills

• SHA: d9af175fe2b86836b431ebdb7e088957e6c7820d

Reviewer signals

These are non-blocking heuristics for maintainer review; they are not evidence of misconduct or low quality.

Signal	Result
Repository age	142 day(s)
Repository activity	no configured signal
Repository counts	24 stars · 1 watchers · 2 forks · 1 open issues/PRs

Quality gate summary

Legend: ✅ pass · ⚠️ warning · 🛑 fail

Gate	Status
spec compliance (non-blocking)	✅ pass
vally lint	✅ pass
install smoke test	✅ pass
version match	✅ pass
ref/sha consistency	⚪ not_run
canvas structure	⚪ not_run

• spec compliance: pass
• vally lint: pass
• install smoke test: pass
• version match: pass
• ref/sha consistency: not_run
• canvas structure: not_run
• overall: pass

spec compliance output (✅ pass)

Agent Plugins v1.0.0 manifest checks passed for plugin.json.

vally lint output (✅ pass)

✅ api-integrations (2/2 checks passed)
    ✓ [spec-compliance] All 1 skill(s) are spec-compliant.
        ✓ spec-compliance: All spec checks passed.
    ✓ [valid-refs] All file references across 1 skill(s) are valid.
        ✓ valid-refs: All file references resolve to existing files within the skill directory.
✅ collections-development (2/2 checks passed)
    ✓ [spec-compliance] All 1 skill(s) are spec-compliant.
        ✓ spec-compliance: All spec checks passed.
    ✓ [valid-refs] All file references across 1 skill(s) are valid.
        ✓ valid-refs: All file references resolve to existing files within the skill directory.
✅ debugging-workflows (2/2 checks passed)
    ✓ [spec-compliance] All 1 skill(s) are spec-compliant.
        ✓ spec-compliance: All spec checks passed.
    ✓ [valid-refs] All file references across 1 skill(s) are valid.
        ✓ valid-refs: All file references resolve to existing files within the skill directory.
✅ development-workflow (2/2 checks passed)
    ✓ [spec-compliance] All 1 skill(s) are spec-compliant.
        ✓ spec-compliance: All spec checks passed.
    ✓ [valid-refs] All file references across 1 skill(s) are valid.
        ✓ valid-refs: All file references resolve to existing files within the skill directory.
✅ e2e-testing (2/2 checks passed)
    ✓ [spec-compliance] All 1 skill(s) are spec-compliant.
        ✓ spec-compliance: All spec checks passed.
    ✓ [valid-refs] All file references across 1 skill(s) are valid.
        ✓ valid-refs: All file references resolve to existing files within the skill directory.
✅ functions-development (2/2 checks passed)
    ✓ [spec-compliance] All 1 skill(s) are spec-compliant.
        ✓ spec-compliance: All spec checks passed.
    ✓ [valid-refs] All file references across 1 skill(s) are valid.
        ✓ valid-refs: All file references resolve to existing files within the skill directory.
✅ functions-falcon-api (2/2 checks passed)
    ✓ [spec-compliance] All 1 skill(s) are spec-compliant.
        ✓ spec-compliance: All spec checks passed.
    ✓ [valid-refs] All file references across 1 skill(s) are valid.
        ✓ valid-refs: All file references resolve to existing files within the skill directory.
✅ fusion-redirect (2/2 checks passed)
    ✓ [spec-compliance] All 1 skill(s) are spec-compliant.
        ✓ spec-compliance: All spec checks passed.
    ✓ [valid-refs] All file references across 1 skill(s) are valid.
        ✓ valid-refs: All file references resolve to existing files within the skill directory.
✅ security-patterns (2/2 checks passed)
    ✓ [spec-compliance] All 1 skill(s) are spec-compliant.
        ✓ spec-compliance: All spec checks passed.
    ✓ [valid-refs] All file references across 1 skill(s) are valid.
        ✓ valid-refs: All file references resolve to existing files within the skill directory.
✅ ui-development (2/2 checks passed)
    ✓ [spec-compliance] All 1 skill(s) are spec-compliant.
        ✓ spec-compliance: All spec checks passed.
    ✓ [valid-refs] All file references across 1 skill(s) are valid.
        ✓ valid-refs: All file references resolve to existing files within the skill directory.
✅ workflows-development (2/2 checks passed)
    ✓ [spec-compliance] All 1 skill(s) are spec-compliant.
        ✓ spec-compliance: All spec checks passed.
    ✓ [valid-refs] All file references across 1 skill(s) are valid.
        ✓ valid-refs: All file references resolve to existing files within the skill directory.

11 skill(s) linted, 11 passed

install smoke test output (✅ pass)

Install smoke test succeeded. Verified /tmp/external-plugin-quality-s9oPv8/copilot-home/.copilot/installed-plugins/external-plugin-intake/crowdstrike-falcon-foundry/plugin.json.

Version match output

- d9af175fe2b86836b431ebdb7e088957e6c7820d: matched version "1.5.0" at "plugin.json".

Ref/SHA consistency output

Ref/SHA consistency gate skipped because one of source.ref or source.sha was not provided.

Canvas structure output

Canvas structure gate skipped because plugin is not tagged with "canvas".

Canonical external.json payload

{
  "name": "crowdstrike-falcon-foundry",
  "description": "AI coding assistant skills for building CrowdStrike Falcon Foundry apps: scaffolding, deployment, and best practices for API integrations, collections, functions, UI extensions, UI pages, and workflows.",
  "version": "1.5.0",
  "author": {
    "name": "CrowdStrike",
    "url": "https://www.crowdstrike.com/"
  },
  "repository": "https://github.com/CrowdStrike/foundry-skills",
  "license": "MIT",
  "keywords": [
    "foundry",
    "crowdstrike",
    "cybersecurity",
    "falcon",
    "security"
  ],
  "source": {
    "source": "github",
    "repo": "CrowdStrike/foundry-skills",
    "sha": "d9af175fe2b86836b431ebdb7e088957e6c7820d"
  }
}

View workflow run

[mraible]

Thanks for the detailed intake report. The valid-refs failures all share one root cause, and we have a fix ready.

Our SKILL.md files link to sibling skills and to a repo-level use-cases/ directory. Those links resolve fine when the whole repository is installed together (how the skills run today on Claude Code, Cursor, and the others), but vally evaluates each skill as a self-contained package, so any link that leaves the skill's own directory shows up as outside-skill-dir. That's why 10 of the 11 skills fail and fusion-redirect, which has no cross-skill links, passes.

The fix converts those cross-directory links to plain-language references that name the target skill or use case, keeping a path in backticks only where it aids discovery. That preserves the routing intent without pointing at files outside the package. It's up in CrowdStrike/foundry-skills#98, and running @microsoft/vally's ValidRefsGrader locally against all 11 skills now passes cleanly.

Since v1.5.0 is immutable, we'll fold this into the next release, then update the ref and SHA on this issue and comment /rerun-intake. Flagging the plan here so it's clear the submission is still active. Thanks for your patience!

[aaronpowell]

You can update the original submission and then rerun the intake process to update the submission

[mraible]

@aaronpowell Do y'all support pinning to versions or are most plugins pulling their content from the project's default branch? I ask because CrowdStrike/foundry-skills#98 is merged.

[mraible]

/rerun-intake

[mraible]

This plugin (and the one in #2722) is now listed in OpenAI's marketplace. https://chatgpt.com/plugins?q=CrowdStrike

Is there anything further I need to do to get them listed in this repo?

[aaronpowell]

Do y'all support pinning to versions or are most plugins pulling their content from the project's default branch?

We don't support default branch at all, either a tag (ref) or a SHA. This is to reduce the mutability of a plugin, because if the underlying source changed due to a push to a mutable ref, then the user wouldn't know to get the update and the marketplace (aka us) wouldn't know something has changed since our last review, which could allow for a malicious actor to slip stuff in (yes, tags are mutable so we prefer a SHA, but they are less mutable than a branch).

The error in the intake is because the ref provided is a SHA not a tag, and our automation isn't quite smart enough to deal with that. We don't need the ref, so I'll remove that and rerun the intake, then it should be good to merge.

[aaronpowell]

/rerun-intake