functions-falcon-api
Call CrowdStrike Falcon platform APIs (detections, alerts, hosts, RTR) from within Foundry function handlers. TRIGGER when user asks to "call Falcon APIs from a function", "use FalconPy in a function", "use gofalcon in a function", or needs to integrate Falcon platform APIs within serverless function code. DO NOT TRIGGER when user wants to expose external third-party APIs to Foundry — use api-integrations instead.
87
82%
Does it follow best practices?
Impact
99%
1.98xAverage score across 3 eval scenarios
Passed
No known issues
Evaluation results
100%
60%Foundry Function: Active Detection Dashboard
Python FDK handler with zero-arg auth
FDK handler decorator
0%
100%
Zero-arg Detects constructor
0%
100%
No credential code
0%
100%
No requests library
100%
100%
Function.instance() usage
0%
100%
func.run() entrypoint
0%
100%
Two-step query+fetch
100%
100%
Status code error check
100%
100%
Correct imports
20%
100%
No region configuration
100%
100%
100%
52%Foundry Function: Host Containment Orchestrator
207 Multi-Status handling and specific errors
207 status check
28%
100%
Embedded errors inspection
85%
100%
Rate-limit specific handling
100%
100%
FDK handler decorator
0%
100%
Zero-arg service class
0%
100%
No OAuth/credential code
0%
100%
No requests library
100%
100%
Specific error response
100%
100%
Function.instance() + func.run()
0%
100%
98%
34%Foundry Function: Resilient Alert Enrichment Service
Retry decorator and mock-based unit tests
Retry decorator present
100%
100%
Exponential backoff
100%
100%
Retry on transient codes
100%
100%
Tests use mocking
100%
100%
Success path tested
100%
100%
Failure path tested
100%
100%
Zero-arg Alerts constructor
0%
100%
FDK handler decorator
0%
75%
No credential code
0%
100%
No requests library
0%
100%
- Repository
- CrowdStrike/foundry-skills
- Commit
631c815
- Evaluated
- Agent
- Claude Code
- Model
- Claude Sonnet 4.6
Table of Contents
Is this your skill?
If you maintain this skill, you can claim it as your own. Once claimed, you can manage eval scenarios, bundle related skills, attach documentation or rules, and ensure cross-agent compatibility.