crowdstrike-falcon-fusion

CrowdStrike Falcon Fusion skills for authoring, deploying, and executing Fusion workflows. Includes live action discovery, YAML authoring with schema validation, workflow import and release, execution monitoring, and Falcon Next-Gen SIEM lookup files.

Install

If the official marketplace isn’t added yet, run

Category: Security
Author: CrowdStrike
GitHub: CrowdStrike/fusion-skills

Good for

Author Falcon Fusion workflow YAML from a prompt and validate it against the platform schema
Discover real action IDs from the live API
Import a workflow to a CID, release it, then trigger and monitor its execution
Manage Falcon Next-Gen SIEM lookup files

Getting started

Create an API client in the Falcon console with the Workflow scope (read and write)
Run /plugin install crowdstrike-falcon-fusion@claude-plugins-official
Run /crowdstrike-falcon-fusion:setup to store credentials, or set FALCON_CLIENT_ID and FALCON_CLIENT_SECRET
Describe the workflow you want in plain language

Before you install

Needs a CrowdStrike account with the Workflow API scope (plus NGSIEM Lookup Files for the lookup-files skill). It is a community open source project, not a CrowdStrike product, with no formal support.

Summarized by AI from the project docs; check the official docs before relying on it.

Similar tools

crowdstrike-falcon-foundryOfficial plugin · Security
CrowdStrike Falcon Foundry development skills for building cybersecurity applications on the Falcon platform. Includes UI development, collections, functions, workflows, API integration, security patterns, and debugging workflows.
claude-securityOfficial plugin · Security
Deep vulnerability scanning of your own code, run entirely inside your Claude Code session at a chosen effort tier, with every finding challenged before it is reported and the verification tally computed in code. Turns surviving findings into targeted patches, each verified by a panel of agents, that you apply when you choose.
security-guidanceOfficial plugin · Security
Security review for Claude-generated code. Pattern-based warnings on edits, LLM-powered diff review on Stop, and an agentic commit reviewer that catches injection, XSS, SSRF, hardcoded secrets, and 25+ other vulnerability classes.
42crunch-api-security-testingOfficial plugin · Security
Automate API security directly in Claude Code with 42Crunch - automatically audit OpenAPI specs, detect vulnerabilities aligned with OWASP API Security risks (including BOLA/BFLA), and apply AI-powered fixes. Designed for AI-assisted development workflows, it provides continuous guardrails through an audit->scan->remediate->validate loop, ensuring APIs meet enterprise security standards before deployment.
auth0Official plugin · Security
Enterprise-grade auth, easy to implement. Add login, SSO, MFA, and access control to any app with framework-aware guidance.