functions-falcon-api

Call CrowdStrike Falcon platform APIs (detections, alerts, hosts, RTR) from within Foundry function handlers. TRIGGER when user asks to "call Falcon APIs from a function", "use FalconPy in a function", "use gofalcon in a function", or needs to integrate Falcon platform APIs within serverless function code. DO NOT TRIGGER when user wants to expose external third-party APIs to Foundry — use api-integrations instead.

1.29x

Quality

86%

Does it follow best practices?

Impact

97%

1.29x

Average score across 3 eval scenarios

Securityby

Passed

No findings from the security scan

Preview

This is a new way to view eval results. We're still working on it, so the layout may change.

Run	Type	Date	Status
baseline vs usage-spec With / without context 5 days ago Completed	With / without context	5 days ago	Completed

Eval run

Name: functions-falcon-api
Rating: 89.8 (1 reviews)
Author: CrowdStrike

01a0dc5b-2bef-74ef-bd8f-1b3bebd18be5

Run 5 days ago

Stats are not available yet

The run is available. Its result stats will appear here when they are ready.

Repository: CrowdStrike/foundry-skills
Path: skills/functions-falcon-api/SKILL.md
Commit: 5a984d0

Evaluated: 5 days ago
Agent: Claude Code
Model: Claude Sonnet 4.6

Table of Contents

Host-Scoped Detection Lookup Endpoint Workflow Execution Statistics Endpoint Falcon Alerts Foundry Function with Resilient API Calls

Is this your skill?

If you maintain this skill, you can claim it as your own. Once claimed, you can manage eval scenarios, bundle related skills, attach documentation or rules, and ensure cross-agent compatibility.