CtrlK
BlogDocsLog inGet started
Tessl Logo
SkillPublic

security-patterns

Security patterns for Falcon Foundry apps including OAuth scopes, RBAC, input validation, UI security, and credential management. TRIGGER when user asks to "configure OAuth scopes", "secure a Foundry app", "handle secrets", "add input validation", or needs to review a Foundry app for security concerns (XSS, CSP, credential management). Also trigger during pre-deployment security reviews.

Quality

86%

Does it follow best practices?

Run evals on this skill

Adds up to 20 points to the overall score

View guide
SecuritybySnyk

Passed

No findings from the security scan

SKILL.md
Quality
Evals
Security

Quality

Content

78%Weight 40%Scale 1-5

Reviews the quality of instructions and guidance provided to agents. Good implementation is clear, handles edge cases, and produces reliable results.

A well-structured, highly actionable reference skill whose body carries dense Foundry-specific knowledge and delegates full implementations cleanly to a single one-level-deep reference file. The main improvement opportunities are small accuracy/looseness trims in the inline examples and slightly tighter pointer redundancy.

Suggestions

Fix the JSON schema example so every entry in "required" (including "timestamp") has a matching definition in "properties", making the snippet correct as written.

Collapse the Reading Guide's four rows — all pointing to the same references/security-examples.md — into a single pointer or a task list under one link, and trim the motivational intro sentence.

Add a short validate-fix-retry loop (e.g., re-run `foundry apps validate` after hand-adding scopes to manifest.yml, and what to do if it fails) to give the workflow an explicit feedback checkpoint.

DimensionReasoningScore

Conciseness

Nearly every token is platform-specific knowledge Claude would not know (RBAC support matrix, auto vs. manual scopes, the CLI scope-name bug, FDK credential handling) with almost no padding, but minor items could be trimmed: the motivational line "Foundry apps run on a cybersecurity platform — security is a core requirement", the version pin "as of CLI 2.1.2", and a Reading Guide whose four rows all repeat the same single reference link.

4 / 5

Actionability

Concrete, copy-paste-ready guidance throughout — CLI commands ("foundry auth scopes add --scopes ..."), manifest YAML (auth.scopes, CSP, function limits, collection TTL), and executable TypeScript/Python snippets — but the JSON schema example requires "timestamp" without defining a property for it, and Function Input Validation gives direction without code, which are anchor-4 minor gaps.

4 / 5

Workflow Clarity

Suite ordering is explicit ("load the `development-workflow` skill first"), each pattern's guidance is unambiguous, and the Pre-Deployment Checklist is an explicit validation checkpoint, but there is no validate-fix-retry feedback loop and the overall task sequence is implicit across sections rather than a single ordered flow, keeping it below anchor 5.

4 / 5

Progressive Disclosure

Clear overview with a single one-level-deep, well-signaled reference whose section headers (Sanitization, CI/CD pipeline, PostMessage, mock data, token lifecycle, antipatterns, performance) match the Reading Guide's task-to-reference rows, and the split is appropriate: decisions and minimal snippets inline, full implementations in the reference file.

5 / 5

Total

17

/

20

Passed

Description

91%Weight 40%Scale 1-5

Based on the skill's description, can an agent find and select it at the right time? Clear, specific descriptions lead to better discovery.

A strong description that explicitly covers both capability areas and concrete trigger phrases in third person, with good synonym coverage. Its only weakness is that a couple of trigger phrases are generic enough to overlap with general security questions outside the Foundry context.

DimensionReasoningScore

Specificity

Lists several specific capability areas ("OAuth scopes, RBAC, input validation, UI security, and credential management") plus a review action, but they are topic areas rather than concrete actions and "including" signals non-exhaustive coverage, placing it just below anchor 5.

4 / 5

Completeness

Explicitly answers both 'what' ("Security patterns for Falcon Foundry apps including OAuth scopes, RBAC, input validation, UI security, and credential management") and 'when' (two explicit TRIGGER clauses with concrete quoted phrases), which is the anchor-5 pattern; the missing-trigger cap does not apply.

5 / 5

Trigger Term Quality

Natural phrases users would actually say ("configure OAuth scopes", "secure a Foundry app", "handle secrets", "add input validation") are covered along with synonyms (secrets/credential management, XSS, CSP) and a workflow-phase trigger ("pre-deployment security reviews"), matching the comprehensive-coverage anchor better than anchor 4's 'a few natural terms missing'.

5 / 5

Distinctiveness Conflict Risk

The Falcon Foundry niche is clearly distinct with domain-specific triggers, but generic phrases like "handle secrets" and "add input validation" lack the Foundry qualifier and could fire in non-Foundry contexts — mostly distinct with minor overlap risk, below anchor 5.

4 / 5

Total

18

/

20

Passed

Validation

87%

Checks the skill against the spec for correct structure and formatting. All validation checks must pass before discovery and implementation can be scored.

Validation — 14 / 16 Passed

Validation for skill structure

CriteriaDescriptionResult

metadata_version

'metadata.version' is missing

Warning

frontmatter_unknown_keys

Unknown frontmatter key(s) found; consider removing or moving to metadata

Warning

Total

14

/

16

Passed

Repository

CrowdStrike/foundry-skills

Path

skills/security-patterns/SKILL.md

Reviewed

Table of Contents

Is this your skill?

If you maintain this skill, you can claim it as your own. Once claimed, you can manage eval scenarios, bundle related skills, attach documentation or rules, and ensure cross-agent compatibility.