security-patterns

Security patterns for Falcon Foundry apps including OAuth scopes, RBAC, input validation, UI security, and credential management. TRIGGER when user asks to "configure OAuth scopes", "secure a Foundry app", "handle secrets", "add input validation", or needs to review a Foundry app for security concerns (XSS, CSP, credential management). Also trigger during pre-deployment security reviews.

Quality

86%

Does it follow best practices?

Run evals on this skill

Adds up to 20 points to the overall score

View guide

Securityby

Passed

No findings from the security scan

Quality

Content

78%Weight 40%Scale 1-5

Reviews the quality of instructions and guidance provided to agents. Good implementation is clear, handles edge cases, and produces reliable results.

A well-structured, actionable security-patterns skill with effective progressive disclosure to a single reference file. Conciseness and actionability are strong with only minor trimming/full-implementation gaps worth addressing.

Suggestions

Trim low-value padding such as the "Foundry apps run on a cybersecurity platform — security is a core requirement" sentence and the role-assignment blockquote to improve conciseness.

Inline a minimal complete sanitization or SecureConsoleMessaging example so the most common security tasks are fully copy-paste-ready without requiring the reference file.

Add an explicit validate→fix→retry feedback loop for at least one fragile operation (e.g., manifest scope verification before deploy) to push workflow clarity higher.

Dimension	Reasoning	Score
Conciseness	The body is largely lean with dense tables and concise code, but includes minor padding such as "Foundry apps run on a cybersecurity platform — security is a core requirement" and a role-assignment blockquote that could be trimmed.	4 / 5
Actionability	Provides concrete, executable snippets across bash, YAML, JSON schema, Python, and TypeScript for the common cases, with full implementations deferred to the reference file — a minor gap versus fully copy-paste-ready coverage.	4 / 5
Workflow Clarity	Organized as a patterns catalog with a Pre-Deployment Checklist acting as a validation gate and suite-coordination ordering note; no explicit validate→fix→retry feedback loop is present, but the skill is not a destructive batch workflow so the cap does not apply.	4 / 5
Progressive Disclosure	SKILL.md is an overview that signals one-level-deep references to references/security-examples.md (verified to exist, ~20 well-organized sections) via repeated inline links plus a Reading Guide navigation table.	5 / 5
	Total	17 / 20 Passed

Description

95%Weight 40%Scale 1-5

Based on the skill's description, can an agent find and select it at the right time? Clear, specific descriptions lead to better discovery.

A strong, specific description that clearly states what the skill covers and gives explicit, natural trigger guidance for when to invoke it. Minor room for improvement only in framing capabilities as concrete actions rather than topic nouns.

Dimension	Reasoning	Score
Specificity	Names the Foundry security domain and lists several concrete capability areas ("OAuth scopes, RBAC, input validation, UI security, and credential management"), but these are framed as topic areas rather than discrete verb-actions, leaving a minor gap versus the comprehensive-actions anchor.	4 / 5
Completeness	Explicitly answers both what ("Security patterns for Falcon Foundry apps including...") and when ("TRIGGER when user asks to...", "Also trigger during pre-deployment security reviews") with concrete trigger phrases.	5 / 5
Trigger Term Quality	Includes numerous natural trigger phrases users would actually say ("configure OAuth scopes", "secure a Foundry app", "handle secrets", "add input validation", "pre-deployment security reviews") plus synonyms (XSS, CSP, credential management).	5 / 5
Distinctiveness Conflict Risk	Targets a clear niche (CrowdStrike Falcon Foundry app security) with distinct, platform-specific triggers, giving minimal overlap risk with general-purpose skills.	5 / 5
	Total	19 / 20 Passed

Validation

81%

Warnings & errors only

Checks the skill against the spec for correct structure and formatting. All validation checks must pass before discovery and implementation can be scored.

Validation — 13 / 16 Passed

Validation for skill structure

Criteria	Description	Result
metadata_version	'metadata.version' is missing	Warning
frontmatter_unknown_keys	Unknown frontmatter key(s) found; consider removing or moving to metadata	Warning
relative_links	Relative link issues: 1 suspicious	Warning

	Total	13 / 16 Passed

Repository: CrowdStrike/foundry-skills
Path: skills/security-patterns/SKILL.md
Commit: c01ff6b

Reviewed: about 21 hours ago

Table of Contents

Discovery Implementation Validation

Is this your skill?

If you maintain this skill, you can claim it as your own. Once claimed, you can manage eval scenarios, bundle related skills, attach documentation or rules, and ensure cross-agent compatibility.