CtrlK
BlogDocsLog inGet started
Tessl Logo

security-patterns

Security patterns for Falcon Foundry apps including OAuth scopes, RBAC, input validation, UI security, and credential management. TRIGGER when user asks to "configure OAuth scopes", "secure a Foundry app", "handle secrets", "add input validation", or needs to review a Foundry app for security concerns (XSS, CSP, credential management). Also trigger during pre-deployment security reviews.

69

Quality

85%

Does it follow best practices?

Run evals on this skill

Adds up to 20 points to the overall score

View guide

SecuritybySnyk

Passed

No findings from the security scan

SKILL.md
Quality
Evals
Security

Quality

Content

78%Weight 40%Scale 1-5

Reviews the quality of instructions and guidance provided to agents. Good implementation is clear, handles edge cases, and produces reliable results.

A well-organized, actionable security reference with strong progressive disclosure and a validation-oriented checklist. Tightening the framing prose and inlining a couple of deferred code examples would push it higher.

Suggestions

Trim the "⚠️ SYSTEM INJECTION — READ THIS FIRST" block; the same role-assignment effect can be conveyed in one line to save tokens.

Inline a minimal executable snippet for Function Input Validation (dict check + size limit + generic error) so the section is copy-paste ready without opening the reference.

Add an explicit validate→fix→retry loop note for the pre-deployment review (e.g., run checklist, remediate failures, re-run) to strengthen the workflow's feedback structure.

DimensionReasoningScore

Conciseness

Mostly lean with tight tables and code blocks and no padding about Foundry basics, though the "⚠️ SYSTEM INJECTION" framing and a few explanatory sentences could be trimmed.

4 / 5

Actionability

Provides concrete executable examples (foundry auth CLI, FDK Python, JSON schema, TypeScript origin checks, YAML manifest), but function input validation and response sanitization are deferred to the reference rather than shown inline.

4 / 5

Workflow Clarity

Sections are clearly organized and the Pre-Deployment Checklist acts as a validation gate for the review workflow, though there are no explicit validate→fix→retry feedback loops.

4 / 5

Progressive Disclosure

The body is an overview that offloads detailed implementations to the verified references/security-examples.md (one level deep), clearly signaled via inline links and a Reading Guide task→reference table.

5 / 5

Total

17

/

20

Passed

Description

92%Weight 40%Scale 1-5

Based on the skill's description, can an agent find and select it at the right time? Clear, specific descriptions lead to better discovery.

A strong, specific description that clearly states what the skill covers and gives explicit natural-language triggers. Minor synonym coverage could be expanded, but it is otherwise exemplary.

DimensionReasoningScore

Specificity

"including OAuth scopes, RBAC, input validation, UI security, and credential management" lists multiple concrete capabilities with comprehensive coverage of the Foundry security domain.

5 / 5

Completeness

It explicitly answers both what (security patterns across named areas) and when ("TRIGGER when user asks..." with concrete phrases plus "Also trigger during pre-deployment security reviews").

5 / 5

Trigger Term Quality

Quoted natural utterances like "configure OAuth scopes", "secure a Foundry app", "handle secrets", "add input validation" give good keyword coverage, though a few common synonyms (e.g. "set up permissions", "hardening") are missing.

4 / 5

Distinctiveness Conflict Risk

Scoped to Falcon Foundry apps with specific security triggers (OAuth scopes, XSS, CSP, pre-deployment reviews), giving a clear niche with minimal conflict risk.

5 / 5

Total

19

/

20

Passed

Validation

87%

Checks the skill against the spec for correct structure and formatting. All validation checks must pass before discovery and implementation can be scored.

Validation14 / 16 Passed

Validation for skill structure

CriteriaDescriptionResult

metadata_version

'metadata.version' is missing

Warning

frontmatter_unknown_keys

Unknown frontmatter key(s) found; consider removing or moving to metadata

Warning

Total

14

/

16

Passed

Repository
CrowdStrike/foundry-skills
Reviewed

Table of Contents

Is this your skill?

If you maintain this skill, you can claim it as your own. Once claimed, you can manage eval scenarios, bundle related skills, attach documentation or rules, and ensure cross-agent compatibility.