CtrlK
BlogDocsLog inGet started
Tessl Logo
SkillPublic

workflows-development

Create and configure Falcon Fusion SOAR workflow YAML for Falcon Foundry apps. TRIGGER when user asks to "create a workflow", "build an automation", "configure Fusion SOAR", "add an on-demand workflow", runs `foundry workflows create`, or needs help with Fusion YAML syntax, triggers, actions, or variable references. DO NOT TRIGGER for UI pages, functions, or collection schemas — use the appropriate sub-skill.

Quality

83%

Does it follow best practices?

Run evals on this skill

Adds up to 20 points to the overall score

View guide
SecuritybySnyk

Passed

No findings from the security scan

SKILL.md
Quality
Evals
Security

Quality

Content

76%Weight 40%Scale 1-5

Reviews the quality of instructions and guidance provided to agents. Good implementation is clear, handles edge cases, and produces reliable results.

A dense, highly actionable reference for a complex domain — copy-paste-ready YAML, exact commands, ID tables, and verbatim error text with no filler. The main gaps are structural: the end-to-end workflow (scaffold → write → validate → deploy → test) is never laid out as a sequence with inline validation checkpoints, and the 'Use Cases' section cites three files missing from the bundle.

Suggestions

Add a short numbered end-to-end sequence (scaffold via `foundry workflows create` → discover actions → write YAML → `foundry apps validate` → deploy → mock-test per advanced-patterns.md) with explicit validation checkpoints; workflows include destructive (Contain device) and batch (loop) operations, and validation is currently only a pointer to a reference file.

Fix or remove the 'Use Cases' section — `use-cases/schemaless-queries.md`, `use-cases/api-pagination.md`, and `use-cases/custom-soar-actions.md` do not exist in the skill bundle, creating dead navigation paths.

Deduplicate the repeated warnings: the `$action_name.output.body` prohibition, the `Custom_` prefix rule, and the Workflow-data-panel copy tip each appear twice and could be consolidated into one canonical statement.

DimensionReasoningScore

Conciseness

Nearly every line is domain-specific guidance (CLI quirks, version_constraint rules, gotchas) with no explanation of concepts Claude already knows; it respects token budget. Minor duplication could be trimmed — the '$action_name.output.body' prohibition appears twice (Variable References and Workflow Structure), the 'Custom_' prefix rule and the Workflow-data-panel tip are also each stated twice. Anchor 4 fits: efficient with minor over-explanation; not anchor 5 due to the repeated warnings and the unexplained version-sensitive aside ('As of CLI 2.1.1...').

4 / 5

Actionability

Fully executable throughout: copy-paste-ready YAML (complete 'list-okta-users' workflow, loops, conditions, send_email), exact CLI commands with flags (`--no-prompt`, `--output-schema`, `--mock`), a verified platform-action ID table, verbatim deploy error messages, and a concrete decision rule for `~0` vs `~1` with a check command. Matches anchor 5 — the common cases are covered with specific, ready-to-run examples.

5 / 5

Workflow Clarity

The content is organized by topic rather than as a sequence; the implied flow (scaffold → discover actions → write YAML → deploy → test) has checkpoints delegated rather than explicit — the Testing section is a two-line pointer to references/advanced-patterns.md. Since workflows here involve destructive (Contain device) and batch operations (device loops), the guideline capping workflow clarity at 3 applies: validation/verification is present in spirit but implicit in the body itself. Not anchor 2 because scaffolding, discovery, and error-recovery warnings do provide a rough sequence.

3 / 5

Progressive Disclosure

Good structure: the body is an overview with well-signaled one-level-deep references — all 7 cited references/*.md files and scripts/action_search.py exist in the bundle, and a Reading Guide table maps tasks to files. Minor organization gap: the 'Use Cases' section points to use-cases/schemaless-queries.md, use-cases/api-pagination.md, and use-cases/custom-soar-actions.md, none of which exist in the bundle. Anchor 4 fits; not anchor 5 because of those dangling references.

4 / 5

Total

16

/

20

Passed

Description

87%Weight 40%Scale 1-5

Based on the skill's description, can an agent find and select it at the right time? Clear, specific descriptions lead to better discovery.

The description is strong: it states a concrete what, gives explicit trigger guidance with natural user phrases and a CLI command, and adds DO-NOT-TRIGGER boundary guidance for sibling skills. The only weakness is modest capability coverage — deploy, testing, and provisioning duties documented in the body are absent from the description, and a few natural synonyms (e.g. 'SOAR playbook', 'scheduled workflow') are missing.

DimensionReasoningScore

Specificity

Names the domain ('Falcon Fusion SoAR workflow YAML for Falcon Foundry apps') and several concrete capabilities — create, configure, plus help with 'Fusion YAML syntax, triggers, actions, or variable references' and the `foundry workflows create` command. It lists several specific actions with minor gaps in coverage (deploy/testing/provisioning scope from the body is unmentioned), matching anchor 4 rather than the comprehensive 5 or the 1-2-action anchor 3.

4 / 5

Completeness

Explicitly answers both: what ('Create and configure Falcon Fusion SoAR workflow YAML for Falcon Foundry apps') and when ('TRIGGER when user asks to... runs foundry workflows create... DO NOT TRIGGER for UI pages, functions, or collection schemas') with concrete trigger phrases. This clearly matches the anchor-5 example structure and is well above anchor 4's 'when could be more explicit'.

5 / 5

Trigger Term Quality

Concrete natural phrases users would say — "create a workflow", "build an automation", "configure Fusion SOAR", "add an on-demand workflow" — plus the literal CLI invocation `foundry workflows create`. Good keyword coverage, but a few natural terms are missing (e.g. "SOAR playbook", "scheduled workflow", .yaml file mentions), so it sits at anchor 4 rather than comprehensive anchor 5.

4 / 5

Distinctiveness Conflict Risk

A clear niche (Falcon Fusion SOAR workflow YAML) with distinct triggers and an explicit exclusion clause routing UI pages, functions, and collection schemas to the appropriate sub-skill. Minimal conflict risk with other skills — matches anchor 5.

5 / 5

Total

18

/

20

Passed

Validation

81%

Checks the skill against the spec for correct structure and formatting. All validation checks must pass before discovery and implementation can be scored.

Validation — 13 / 16 Passed

Validation for skill structure

CriteriaDescriptionResult

metadata_version

'metadata.version' is missing

Warning

frontmatter_unknown_keys

Unknown frontmatter key(s) found; consider removing or moving to metadata

Warning

referenced_paths_exist

Referenced path issues: 1 missing

Warning

Total

13

/

16

Passed

Repository

CrowdStrike/foundry-skills

Path

skills/workflows-development/SKILL.md

Reviewed

Table of Contents

Is this your skill?

If you maintain this skill, you can claim it as your own. Once claimed, you can manage eval scenarios, bundle related skills, attach documentation or rules, and ensure cross-agent compatibility.