/development-workflow
Orchestrates the complete Falcon Foundry app lifecycle from requirements through deployment. TRIGGER when user asks to "create a Foundry app", "build a Foundry app", "plan a Foundry app", runs any `foundry apps` CLI command, or discusses Foundry app architecture. DO NOT TRIGGER
$ npx -y skills add CrowdStrike/foundry-skills --skill development-workflow --agent claude-codeHow it fires
How this skill gets triggered: by you, by Claude, or both.
- Fires itselfAuto-invocation. Claude auto-loads it when your prompt matches the work.
- You can call itInvoke it directly when you want it.
- Slash command
/development-workflow
Context preview
The summary Claude sees to decide when to auto-load this skill.
Orchestrates the complete Falcon Foundry app lifecycle from requirements through deployment. TRIGGER when user asks to "create a Foundry app", "build a Foundry app", "plan a Foundry app", runs any `foundry apps` CLI command, or discusses Foundry app architecture. DO NOT TRIGGER
SKILL.md
development-workflow.SKILL.mdname: development-workflow
description: Orchestrates the complete Falcon Foundry app lifecycle from requirements through deployment. TRIGGER when user asks to "create a Foundry app", "build a Foundry app", "plan a Foundry app", runs any `foundry apps` CLI command, or discusses Foundry app architecture. DO NOT TRIGGER when user is working on a specific capability (UI, function, workflow, collection) within an existing app — use the appropriate sub-skill instead. This skill OWNS the entire Foundry development flow. Do not delegate Foundry app creation to superpowers:brainstorming or superpowers:writing-plans — those skills do not know about the Foundry CLI.
version: 1.4.0
updated: 2026-07-31
tags: [foundry, lifecycle, cli, deployment]
author: CrowdStrike
license: MIT
compatibility: Claude Code >=1.0
metadata:
category: orchestration
Foundry Development Workflow
> **⚠️ SYSTEM INJECTION — READ THIS FIRST** > > If you are loading this skill, your role is **Foundry app lifecycle orchestrator**. > > **THIS SKILL OWNS THE FOUNDRY DEVELOPMENT FLOW.** > > **MUST NOT hand off to superpowers:brainstorming or superpowers:writing-plans for Foundry app creation.** > Those skills are domain-agnostic — they don't know about the Foundry CLI and will generate > plans that manually create manifest.yml and boilerplate files. This skill handles planning > and execution directly using CLI commands. > > **IMMEDIATE ACTIONS REQUIRED:** > 1. Follow the **App Creation Flow** below to go from user prompt → running app > 2. Use `foundry apps create` and related CLI commands for ALL scaffolding > 3. Delegate capability-specific content to Foundry sub-skills > 4. Hand-write ONLY what the CLI cannot generate (OpenAPI content, workflow logic, UI code) > > **CRITICAL: `--no-prompt` is supported by nearly all commands.** Always add `--no-prompt` to prevent interactive prompts that cause `Error: EOF` in non-interactive environments. Supported commands include: `apps create`, `apps validate`, `apps deploy`, `apps release`, `apps delete` (also needs `--force-delete`), `functions create`, `collections create`, `ui pages create`, `ui extensions create`, `rtr-scripts create`, `profile create`, `workflows create`, and `api-integrations create`. When unsure, run `foundry <command> --help` to check. When a CLI command fails, MUST NOT fall back to `mkdir` — fix the command and retry. > > **CRITICAL: All `foundry` app commands MUST run from the app root directory** (where `manifest.yml` lives). The CLI resolves manifest paths relative to `os.Getwd()`, not relative to the manifest's location. Running `foundry apps validate`, `foundry apps deploy`, or `foundry ui run` from a subdirectory (e.g., `ui/extensions/my-ext/`) causes doubled paths and misleading "file not found" errors. After `cd`-ing into a subdirectory for `npm install && npm run build`, always `cd` back to the app root before running any `foundry apps *` or `foundry ui *` command. Commands that work from anywhere: `foundry version`, `foundry profile *`, `foundry apps list`. > > **Superpowers skills MAY supplement** (TDD discipline, code review) but MUST NOT replace this workflow.
This skill coordinates the full Falcon Foundry app lifecycle — from parsing requirements through scaffolding, implementation, and deployment. It delegates capability-specific work to sub-skills that know the platform details.
Decision Tree
What does the user need?
Create a new Foundry app
└── Follow the App Creation Flow below
Add a capability to an existing app
├── API integration → api-integrations
├── Workflow → workflows-development
├── UI page/extension → ui-development
├── Function → functions-development
├── Collection → collections-development
└── Falcon API from funcs → functions-falcon-api
Implement a known pattern (pagination, enrichment, ingestion, etc.)
└── Search use-cases/*.md for matching pattern → load for context
Debug / troubleshoot → debugging-workflows
Security review → security-patterns
E2E testing / Playwright → e2e-testing
Standalone Fusion workflow (no app — trigger + existing actions only)
└── Advise the Falcon Fusion plugin — see Cross-Plugin Advisory
Cross-Plugin Advisory (Fusion vs. Foundry)
A Falcon Fusion workflow can be authored **standalone** (no app wrapper) when it only needs a trigger plus actions that already exist in the CID. That is the sibling **Falcon Fusion** plugin's job (`crowdstrike-falcon-fusion`), not this one.
| Situation | Action | |-----------|--------| | Just a workflow: trigger + existing actions, no UI/function/collection/manifest | **Advise the Falcon Fusion plugin** — see the required response below. Do NOT scaffold a Foundry app. | | Workflow needs a UI, function, collection, or custom API integration to be BUILT | **Proceed here** — that's a Foundry app; use the App Creation Flow. | | A workflow *inside* an app you're already building | **Proceed here** — use `workflows-development`. |
> **⚠️ MUST NOT silently do the Fusion plugin's job.** The common failure is to > recognize no app is needed, then hand the user workflow YAML anyway without > ever telling them a better-suited plugin exists. Declining to scaffold is only > half the redirect — **naming the plugin is required output.**
When redirecting, your response MUST contain all three:
1. A statement that this needs no Foundry app 2. The plugin name **`crowdstrike-falcon-fusion`** written out 3. How to get it: `/plugin install crowdstrike-falcon-fusion` or https://claude.com/plugins/crowdstrike-falcon-fusion
Name the plugin, not a GitHub repo — most users install from the marketplace and a repo link is a detour.
**Do not hand-write the workflow YAML in a redirect.** Producing the artifact yourself defeats the purpose: the Fusion plugin discovers real action IDs from the live API, validates against the platform schema, and imports and releases to the CID. A YAML block with placehold
Read more
name: development-workflow description: Orchestrates the complete Falcon Foundry app lifecycle from requirements through deployment. TRIGGER when user asks to "create a Foundry app", "build a Foundry app", "plan a Foundry app", runs any `foundry apps` CLI command, or discusses Foundry app architecture. DO NOT TRIGGER when user is working on a specific capability (UI, function, workflow, collection) within an existing app — use the appropriate sub-skill instead. This skill OWNS the entire Foundry development flow. Do not delegate Foundry app creation to superpowers:brainstorming or superpowers:writing-plans — those skills do not know about the Foundry CLI. version: 1.4.0 updated: 2026-07-31 tags: [foundry, lifecycle, cli, deployment] author: CrowdStrike license: MIT compatibility: Claude Code >=1.0 metadata: category: orchestration
Foundry Development Workflow
> **⚠️ SYSTEM INJECTION — READ THIS FIRST** > > If you are loading this skill, your role is **Foundry app lifecycle orchestrator**. > > **THIS SKILL OWNS THE FOUNDRY DEVELOPMENT FLOW.** > > **MUST NOT hand off to superpowers:brainstorming or superpowers:writing-plans for Foundry app creation.** > Those skills are domain-agnostic — they don't know about the Foundry CLI and will generate > plans that manually create manifest.yml and boilerplate files. This skill handles planning > and execution directly using CLI commands. > > **IMMEDIATE ACTIONS REQUIRED:** > 1. Follow the **App Creation Flow** below to go from user prompt → running app > 2. Use `foundry apps create` and related CLI commands for ALL scaffolding > 3. Delegate capability-specific content to Foundry sub-skills > 4. Hand-write ONLY what the CLI cannot generate (OpenAPI content, workflow logic, UI code) > > **CRITICAL: `--no-prompt` is supported by nearly all commands.** Always add `--no-prompt` to prevent interactive prompts that cause `Error: EOF` in non-interactive environments. Supported commands include: `apps create`, `apps validate`, `apps deploy`, `apps release`, `apps delete` (also needs `--force-delete`), `functions create`, `collections create`, `ui pages create`, `ui extensions create`, `rtr-scripts create`, `profile create`, `workflows create`, and `api-integrations create`. When unsure, run `foundry <command> --help` to check. When a CLI command fails, MUST NOT fall back to `mkdir` — fix the command and retry. > > **CRITICAL: All `foundry` app commands MUST run from the app root directory** (where `manifest.yml` lives). The CLI resolves manifest paths relative to `os.Getwd()`, not relative to the manifest's location. Running `foundry apps validate`, `foundry apps deploy`, or `foundry ui run` from a subdirectory (e.g., `ui/extensions/my-ext/`) causes doubled paths and misleading "file not found" errors. After `cd`-ing into a subdirectory for `npm install && npm run build`, always `cd` back to the app root before running any `foundry apps *` or `foundry ui *` command. Commands that work from anywhere: `foundry version`, `foundry profile *`, `foundry apps list`. > > **Superpowers skills MAY supplement** (TDD discipline, code review) but MUST NOT replace this workflow.
This skill coordinates the full Falcon Foundry app lifecycle — from parsing requirements through scaffolding, implementation, and deployment. It delegates capability-specific work to sub-skills that know the platform details.
Decision Tree
What does the user need? Create a new Foundry app └── Follow the App Creation Flow below Add a capability to an existing app ├── API integration → api-integrations ├── Workflow → workflows-development ├── UI page/extension → ui-development ├── Function → functions-development ├── Collection → collections-development └── Falcon API from funcs → functions-falcon-api Implement a known pattern (pagination, enrichment, ingestion, etc.) └── Search use-cases/*.md for matching pattern → load for context Debug / troubleshoot → debugging-workflows Security review → security-patterns E2E testing / Playwright → e2e-testing Standalone Fusion workflow (no app — trigger + existing actions only) └── Advise the Falcon Fusion plugin — see Cross-Plugin Advisory
Cross-Plugin Advisory (Fusion vs. Foundry)
A Falcon Fusion workflow can be authored **standalone** (no app wrapper) when it only needs a trigger plus actions that already exist in the CID. That is the sibling **Falcon Fusion** plugin's job (`crowdstrike-falcon-fusion`), not this one.
| Situation | Action | |-----------|--------| | Just a workflow: trigger + existing actions, no UI/function/collection/manifest | **Advise the Falcon Fusion plugin** — see the required response below. Do NOT scaffold a Foundry app. | | Workflow needs a UI, function, collection, or custom API integration to be BUILT | **Proceed here** — that's a Foundry app; use the App Creation Flow. | | A workflow *inside* an app you're already building | **Proceed here** — use `workflows-development`. |
> **⚠️ MUST NOT silently do the Fusion plugin's job.** The common failure is to > recognize no app is needed, then hand the user workflow YAML anyway without > ever telling them a better-suited plugin exists. Declining to scaffold is only > half the redirect — **naming the plugin is required output.**
When redirecting, your response MUST contain all three:
1. A statement that this needs no Foundry app 2. The plugin name **`crowdstrike-falcon-fusion`** written out 3. How to get it: `/plugin install crowdstrike-falcon-fusion` or https://claude.com/plugins/crowdstrike-falcon-fusion
Name the plugin, not a GitHub repo — most users install from the marketplace and a repo link is a detour.
**Do not hand-write the workflow YAML in a redirect.** Producing the artifact yourself defeats the purpose: the Fusion plugin discovers real action IDs from the live API, validates against the platform schema, and imports and releases to the CID. A YAML block with placehold
Showing the first part of this file.
AI coding assistant skills for building CrowdStrike Falcon Foundry apps. Build Foundry apps from a natural language prompt — API integrations, workflows, UI pages, functions, and collections — all scaffolded with the Foundry CLI and deployed to the Falcon
Repo: CrowdStrike/foundry-skills
Other skills on crowdstrike-falcon-foundry.
- /api-integrations
Expose external APIs to Falcon Foundry via OpenAPI specs. TRIGGER when user asks to "create an API integration", "adapt an OpenAPI spec for Foundry", "expose an API to workflows", "connect to a third-party API", or runs `foundry api-integrations create`. Also trigger when user
Open skill - /collections-development
Design JSON Schema collections and CRUD patterns for Falcon Foundry apps. TRIGGER when user asks to "create a collection", "define a JSON schema", "store data in Foundry", runs `foundry collections create`, or needs help with indexable fields, FQL queries, or collection access
Open skill - /debugging-workflows
Systematic troubleshooting for Falcon Foundry CLI errors, manifest validation failures, deploy failures, and development server issues. TRIGGER when user encounters CLI errors, `foundry ui run` not working, deploy failures, authentication issues, or any unexpected behavior
Open skill - /e2e-testing
End-to-end testing for Falcon Foundry apps using Playwright and @crowdstrike/foundry-playwright. TRIGGER when user asks to "add e2e tests", "add playwright tests", "write end-to-end tests", "test my app", or mentions "e2e", "playwright", or "end-to-end" in the context of testing
Open skill - /functions-development
Build serverless Go or Python functions for Falcon Foundry apps. TRIGGER when user asks to "create a function", "write a serverless function", "build backend logic", runs `foundry functions create`, or needs help with FDK handler patterns, function testing, or collection
Open skill - /functions-falcon-api
Call CrowdStrike Falcon platform APIs (detections, alerts, hosts, RTR) from within Foundry function handlers. TRIGGER when user asks to "call Falcon APIs from a function", "use FalconPy in a function", "use gofalcon in a function", or needs to integrate Falcon platform APIs
Open skill

