Skills/Claude Code plugins/crowdstrike-falcon-fusion

crowdstrike-falcon-fusion@1.4.0

CAUTION· install only

Publisher claims: "CrowdStrike Falcon Fusion skills for authoring, deploying, and executing Fusion workflows. Includes live action discovery, YAML authoring with schema validation, workflow import and release, execution monitoring, and Falcon Next-Gen SIEM lookup files." Observed in sandbox: no network, touches nothing outside the project, writes no memory.

Registry Claude Code plugin marketplacePublisher crowdstrike · publishing for 331 daysInstalls 0Last detonated 14 h ago
What would fix thisWatchDispute verdict

Coverage

Nothing executable in the bundle ran; the trace covers the install step only.
Tested
every file read, file written and host contacted by what ran
Not tested
use of the skill by an agent

Is [email protected] safe to install?

KillerSkills ran it in the KillerSkills honeypot sandbox (1 scenario; nothing executable in the bundle ran; the trace covers the install step only) on 2026-11-13 and scored it 64/100 (Caution). It is not known to be malicious, but it has behaviour or code a security policy should decide on before install. Notable findings: Pipe-to-shell pattern; Pipe-to-shell pattern; Pipe-to-shell pattern. Summary: no network, touches nothing outside the project, writes no memory.

Behavior trace

Honeypot run · 0 s · 1 scenarios · 0 deviations
t+CategoryObserved action
0.0sprocessno install scripts in bundle
0.0sprocessscript backend runs setup only
0.0sprocessscript backend runs setup only
0.0sprocessno install scripts to re-run

Static findings

CRITICAL
Pipe-to-shell patternscripts/python-detect.sh:162 · Pipe-to-shell pattern — downloads and immediately executes remote codeecho " # or: curl -LsSf https://astral.sh/uv/install.sh | sh && uv python install 3.13"Fix: Build commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.
AST06
CRITICAL
Pipe-to-shell patternscripts/python-detect.sh:166 · Pipe-to-shell pattern — downloads and immediately executes remote codeecho " curl -LsSf https://astral.sh/uv/install.sh | sh && uv python install 3.13"Fix: Build commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.
AST06
CRITICAL
Pipe-to-shell patternscripts/python-detect.sh:157 · Pipe-to-shell pattern — downloads and immediately executes remote codeecho " # or: curl -LsSf https://astral.sh/uv/install.sh | sh && uv python install 3.13"Fix: Build commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.
AST06
HIGH
Privileged sudo commandscripts/python-detect.sh:155 · Privileged sudo command — agent may execute with elevated privilegesecho " sudo add-apt-repository ppa:deadsnakes/ppa && sudo apt update"Fix: Build commands from fixed arguments; do not interpolate untrusted strings into a shell.
AST05
HIGH
Collapsed <details> block carrying instructionsREADME.md:37 · Collapsed <details> block carrying instructions<summary><strong>Install from a local clone</strong> (for development or testing a branch)</summary> ```bash git clone https://github.com/CrowdStrike/fusion-skiFix: Remove the text that addresses the agent rather than the reader; describe behavior, do not instruct.
AST01
MEDIUM
File type combined with upload actionskills/lookup-files/scripts/get_lookup.py:6 · File type combined with upload action — agent may exfiltrate local data filespython get_lookup.py --name "blocklist.csv" --output file.csv # Save to fileFix: Remove the call, or declare the host in frontmatter and explain in the README what is sent and why.
AST07
MEDIUM
Process kill commandscripts/cursor-plugin-stash.sh:46 · Process kill command — agent can terminate processes# Record the origin first, so a kill right after the move can still be undone.Fix: Build commands from fixed arguments; do not interpolate untrusted strings into a shell.
AST05
HIGH
Privileged sudo commandscripts/python-detect.sh:156 · Privileged sudo command — agent may execute with elevated privilegesecho " sudo apt install python3.13 python3.13-venv"Fix: Build commands from fixed arguments; do not interpolate untrusted strings into a shell.
AST05
HIGH
Privileged sudo commandscripts/setup-python-venv.sh:71 · Privileged sudo command — agent may execute with elevated privileges[[ "$platform" == "debian" ]] && echo "Try: sudo apt install python3.13-venv" >&2Fix: Build commands from fixed arguments; do not interpolate untrusted strings into a shell.
AST05
MEDIUM
File type combined with upload actionskills/lookup-files/scripts/create_lookup.py:5 · File type combined with upload action — agent may exfiltrate local data filespython create_lookup.py --file data.csv # Upload (filename from path)Fix: Remove the call, or declare the host in frontmatter and explain in the README what is sent and why.
AST07
MEDIUM
File type combined with upload actionscripts/convert_catalog_to_yaml.py:18 · File type combined with upload action — agent may exfiltrate local data filespython convert_catalog_to_yaml.py INPUT.json [-o OUTPUT.yaml]Fix: Remove the call, or declare the host in frontmatter and explain in the README what is sent and why.
AST07
HIGH
Prompting user to enter sensitive credentialsskills/setup/SKILL.md:181 · Prompting user to enter sensitive credentials — social engineeringnot through the chat. Do **not** ask them to paste the secret into the chat.Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST03
MEDIUM
Python subprocess execution detectedcommon/scripts/auth.py:206 · Python subprocess execution detectedresult = subprocess.run(Fix: Build commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.
AST05
MEDIUM
File type combined with upload actionskills/lookup-files/scripts/verify_lookup.py:16 · File type combined with upload action — agent may exfiltrate local data filespython verify_lookup.py --file blocklist.csv --keep --json # keep the file, JSON outputFix: Remove the call, or declare the host in frontmatter and explain in the README what is sent and why.
AST07
MEDIUM
File permission modification commandskills/setup/SKILL.md:155 · File permission modification command — agent changes file ownership/permissionschmod 700 ~/.cache/crowdstrike-falcon-fusionFix: Request the narrowest permission that works; replace wildcards with the exact paths or hosts.
AST05
MEDIUM
File permission modification commandskills/setup/SKILL.md:156 · File permission modification command — agent changes file ownership/permissionschmod 600 ~/.cache/crowdstrike-falcon-fusion/credentials.tomlFix: Request the narrowest permission that works; replace wildcards with the exact paths or hosts.
AST05
MEDIUM
Remote installer piped to shellscripts/python-detect.sh:166 · Remote installer piped to shellecho " curl -LsSf https://astral.sh/uv/install.sh | sh && uv python install 3.13"Fix: Build commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.
AST07
MEDIUM
Remote installer piped to shellscripts/python-detect.sh:157 · Remote installer piped to shellecho " # or: curl -LsSf https://astral.sh/uv/install.sh | sh && uv python install 3.13"Fix: Build commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.
AST07
MEDIUM
Remote installer piped to shellscripts/python-detect.sh:162 · Remote installer piped to shellecho " # or: curl -LsSf https://astral.sh/uv/install.sh | sh && uv python install 3.13"Fix: Build commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.
AST07
MEDIUM
Process kill commandscripts/skill-isolation.sh:13 · Process kill command — agent can terminate processes# deleted, so a bug or a kill can strand an entry in the stash but can neverFix: Build commands from fixed arguments; do not interpolate untrusted strings into a shell.
AST05
MEDIUM
Process kill commandscripts/agy-plugin-swap.sh:68 · Process kill command — agent can terminate processes# Record first, so a kill anywhere below leaves enough behind to undo it.Fix: Build commands from fixed arguments; do not interpolate untrusted strings into a shell.
AST05
HIGH
Privileged sudo commandscripts/python-detect.sh:161 · Privileged sudo command — agent may execute with elevated privilegesecho " sudo dnf install python3.13"Fix: Build commands from fixed arguments; do not interpolate untrusted strings into a shell.
AST05
MEDIUM
File type combined with upload actionskills/lookup-files/scripts/verify_lookup.py:14 · File type combined with upload action — agent may exfiltrate local data filespython verify_lookup.py --file blocklist.csv # upload, verify, deleteFix: Remove the call, or declare the host in frontmatter and explain in the README what is sent and why.
AST07

Cost to the agent

Instructions loaded
≈24,599 tok
7 files · 80 in bundle

Tokens estimated at four characters each. Skills load their instruction text when triggered; the figure is what that costs.

Known vulnerabilities

Vulnerability advisories (OSV) cover npm and PyPI packages; this registry has no advisory database.

What would make this Verified

16 points to 80 · weights: behavior 45%, static 25%, prompt 15%, publisher 15%
  1. Pipe-to-shell pattern≈ +9 on the totalBuild commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.
  2. Unclaimed publisher≈ +8 on the totalClaim crowdstrike: a verified publisher gets +50 on publisher trust. It is free and usually instant with GitHub sign-in.
  3. Hidden instructions≈ +6 on the totalRemove HTML comments, zero-width characters and white-on-white text that carry instructions. Everything the agent is meant to read should be visible to the person reading the file.
  4. Privileged sudo command≈ +4 on the totalBuild commands from fixed arguments; do not interpolate untrusted strings into a shell.
  5. Prompting user to enter sensitive credentials≈ +4 on the totalStop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
  6. File type combined with upload action≈ +2 on the totalRemove the call, or declare the host in frontmatter and explain in the README what is sent and why.
Publish a new version to Claude Code plugins, then queue it here. Not your skill? Claim the handle to get verdict changes by email.Claim crowdstrikePropose a patch to the maintainer