CtrlK
BlogDocsLog inGet started
Tessl Logo
SkillPublic

api-integrations

Expose external APIs to Falcon Foundry via OpenAPI specs. TRIGGER when user asks to "create an API integration", "adapt an OpenAPI spec for Foundry", "expose an API to workflows", "connect to a third-party API", or runs `foundry api-integrations create`. Also trigger when user has an OpenAPI/Swagger spec and wants it working in Falcon Foundry. DO NOT TRIGGER when user wants to call Falcon platform APIs from function code — use functions-falcon-api instead.

Quality

87%

Does it follow best practices?

Run evals on this skill

Adds up to 20 points to the overall score

View guide
SecuritybySnyk

Low

Low-risk findings worth noting

SKILL.md
Quality
Evals
Security

Quality

Content

77%Weight 40%Scale 1-5

Reviews the quality of instructions and guidance provided to agents. Good implementation is clear, handles edge cases, and produces reliable results.

A strong, highly actionable skill body with an explicitly sequenced workflow, validation checkpoints, and error-recovery guidance, all grounded in production-derived specifics. Its weaknesses are redundancy (three rules each stated 2-3 times across sections) and a set of use-case references that don't resolve to real bundle files.

Suggestions

Consolidate the repeated rules: state the `--description` 50-character cap, the 'never Read/sed large specs' rule, and the 'x-cs-operation-config only when asked' rule once each, and have Common Pitfalls cross-reference the canonical section instead of restating them.

Fix or remove the dangling `use-cases/http-actions.md`, `use-cases/greynoise-deep-dive.md`, and `use-cases/custom-soar-actions.md` references — no `use-cases/` directory exists in the bundle, so following them fails.

Move the vendor-auth prose that repeats the auth table (e.g., the apiKey-prefix paragraph) and the full foundry-js example into `references/auth-examples.md` and `references/calling-patterns.md`, keeping only a minimal inline example in SKILL.md.

DimensionReasoningScore

Conciseness

The body is dense with Foundry-specific knowledge Claude doesn't have (good), but several rules are repeated verbatim in multiple sections: the 50-character `--description` cap appears three times (top blockquote, step 3 callout, Common Pitfalls), the 'never Read/sed large spec files' rule appears in both Efficiency Rules and Common Pitfalls, and the 'only add x-cs-operation-config when asked' rule appears in step 3, the Expose section, and Pitfalls. This is noticeable duplication that could be consolidated. Not 2 because there is no explanation of concepts Claude already knows (OpenAPI, OAuth basics, etc.) and most sections earn their tokens; not 4 because the redundancy across three sections is more than minor trimming.

3 / 5

Actionability

Fully executable throughout: exact CLI commands (`foundry api-integrations create --name … --description … --spec … --no-prompt`), a venv setup block for the PEP 668 problem, a copy-paste python3 snippet for patching a single operation, complete YAML/JSON spec fragments, a runnable foundry-js calling example, and exact error strings ('input must be at most 50 characters long', '400 request failed schema validation: …') that enable precise failure matching. Common cases are covered end-to-end.

5 / 5

Workflow Clarity

The 'Download, Adapt, Register' workflow is explicitly ordered with numbered steps, includes an explicit validation checkpoint after registration ("Validate immediately after registering (`foundry apps validate --no-prompt`)"), an explicit error-recovery path when the adapt script gets a field wrong ("patch only that field and tell the user what the script missed"), guidance for the hook-blocked Swagger 2.0 case, and the deploy→lookup-ID→re-deploy loop for agent tools. The operation is not destructive, so no batch-validation cap applies.

5 / 5

Progressive Disclosure

Structure is real: a Reading Guide table maps tasks to the three reference files (all of which exist in the bundle), references are one level deep and well signaled, and the adapt script is properly bundled. However, the body cites `use-cases/http-actions.md`, `use-cases/greynoise-deep-dive.md`, and `use-cases/custom-soar-actions.md`, and no `use-cases/` directory exists in the bundle — three dangling references. Additionally, a fair amount of detail (the auth pattern table with prose, the full foundry-js example, server-URL variants) duplicates material that the reference files exist to hold. Not 4 because broken references exceed 'minor organization gaps'; not 2 because the core structure and navigation are genuinely good.

3 / 5

Total

16

/

20

Passed

Description

95%Weight 40%Scale 1-5

Based on the skill's description, can an agent find and select it at the right time? Clear, specific descriptions lead to better discovery.

An exemplary description: third-person, concise, concrete, with explicit positive and negative trigger phrases and disambiguation from a sibling skill. The only weakness is that the core 'what' is a single clause — auth configuration and spec adaptation are only implied through trigger phrasing.

DimensionReasoningScore

Specificity

The opening sentence names the domain and concrete action ("Expose external APIs to Falcon Foundry via OpenAPI specs"), and the trigger phrases enumerate several specific tasks (create, adapt an OpenAPI spec, expose an API to workflows, connect a third-party API, run the CLI command). Minor gaps: it doesn't mention the auth-configuration or registration/adaptation steps that make up the core workflow. Not 5 because the 'what' is carried largely by a single clause rather than a comprehensive list of capabilities; not 3 because the trigger list does name several concrete, distinct actions.

4 / 5

Completeness

Explicitly answers both: 'what' ("Expose external APIs to Falcon Foundry via OpenAPI specs") and 'when' with concrete trigger phrases ("TRIGGER when user asks to…", "Also trigger when user has an OpenAPI/Swagger spec and wants it working in Falcon Foundry"), plus a negative trigger. Matches the score-5 anchor exactly; not 4 because the 'when' is already fully explicit with multiple concrete phrases.

5 / 5

Trigger Term Quality

Comprehensive natural phrases users would actually say ("create an API integration", "connect to a third-party API", "expose an API to workflows") plus the exact CLI command `foundry api-integrations create`, and synonym coverage of both "OpenAPI" and "Swagger". Nothing a user would naturally say is missing.

5 / 5

Distinctiveness Conflict Risk

Clear niche (Falcon Foundry API integrations via OpenAPI specs) with an explicit disambiguation clause: "DO NOT TRIGGER when user wants to call Falcon platform APIs from function code — use functions-falcon-api instead." This actively prevents the most likely wrong-skill trigger; minimal conflict risk.

5 / 5

Total

19

/

20

Passed

Validation

87%

Checks the skill against the spec for correct structure and formatting. All validation checks must pass before discovery and implementation can be scored.

Validation — 14 / 16 Passed

Validation for skill structure

CriteriaDescriptionResult

metadata_version

'metadata.version' is missing

Warning

frontmatter_unknown_keys

Unknown frontmatter key(s) found; consider removing or moving to metadata

Warning

Total

14

/

16

Passed

Repository

CrowdStrike/foundry-skills

Path

skills/api-integrations/SKILL.md

Reviewed

Table of Contents

Is this your skill?

If you maintain this skill, you can claim it as your own. Once claimed, you can manage eval scenarios, bundle related skills, attach documentation or rules, and ensure cross-agent compatibility.