Name: functions-falcon-api
Rating: 86.4 (1 reviews)
Author: CrowdStrike

functions-falcon-api

Call CrowdStrike Falcon platform APIs (detections, alerts, hosts, RTR) from within Foundry function handlers. TRIGGER when user asks to "call Falcon APIs from a function", "use FalconPy in a function", "use gofalcon in a function", or needs to integrate Falcon platform APIs within serverless function code. DO NOT TRIGGER when user wants to expose external third-party APIs to Foundry — use api-integrations instead.

1.23x

Quality

82%

Does it follow best practices?

Impact

100%

1.23x

Average score across 3 eval scenarios

Securityby

Passed

No known issues

Evaluation results

100%

28%

Foundry Function: Host Containment Dashboard

Python FDK handler auth patterns

Criteria

Without context

With context

Zero-arg Hosts()

100%

FDK imports

100%

Function.instance()

100%

@func.handler decorator

100%

No OAuth code

100%

No credential wrapper

100%

No requests library

100%

207 Multi-Status handling

100%

Status code error checks

100%

func.run() entrypoint

100%

API calls inside handlers

100%

Go Foundry Function: Alerts Feed Service

Go FDK authentication and routing

Criteria

Without context

With context

gofalcon import

100%

foundry-fn-go import

100%

X-CS-ACCESSTOKEN header

100%

fdk.FalconClientOpts()

100%

falcon.ApiConfig fields

100%

fdk.NewMux() routing

100%

fdk.HandleFnOf typed handler

50%

100%

fdk.Run entrypoint

100%

No manual OAuth

100%

No region hardcoding

100%

24%

Foundry Function: Detection Enrichment with Resilient API Calls

Testing mocks and retry resilience

Criteria

Without context

With context

Mocked Falcon in tests

91%

100%

No credentials in tests

100%

Retry on transient codes

100%

Exponential backoff

100%

Max retries bounded

100%

Zero-arg constructors

100%

FDK handler decorator

100%

Test: not-found case

100%

Test: transient error retried

100%

No requests library

100%

func.run() entrypoint

100%

Repository: CrowdStrike/foundry-skills
Commit: e7fa026

Evaluated: 1 day ago
Agent: Claude Code
Model: Claude Sonnet 4.6

Table of Contents

Foundry Function: Host Containment Dashboard Go Foundry Function: Alerts Feed Service Foundry Function: Detection Enrichment with Resilient API Calls

Is this your skill?

If you maintain this skill, you can claim it as your own. Once claimed, you can manage eval scenarios, bundle related skills, attach documentation or rules, and ensure cross-agent compatibility.