You can now create CrowdStrike workflows within Claude Code or your favourite \\\[SKILLS.md\\\](\[http://SKILLS.md\\\](http://SKILLS.md)) compatible editor.

$ claude

/plugin marketplace add https://github.com/eth0izzle/security-skills.git

/plugin install fusion-workflows@security-skills

/plan

"create a scheduled workflow that searches for logins of AD admins that are outside of our IP space (84.23.145.X)"

I created this to simplify workflow creation from outside the Fusion UI, which I found quite limiting so this Skill teaches Claude how to write them directly in YAML. Setup API access and it'll talk to the CrowdStrike API to fetch enabled integrations and actions within your tenant, using the correct CIDs, input/output schemas, etc. and it can test and import them directly. You can basically fully automate entire playbooks in one shot.

Read more here;

https://darkport.co.uk/blog/building-crowdstrike-workflows-with-claude-code-skills/

All open-source; https://github.com/eth0izzle/security-skills

Would love to hear any feedback! \*(or other ideas for Security Skills)\*