Crowdstrike Falcon Foundry
CrowdStrike Falcon Foundry development skills for building cybersecurity applications on the Falcon platform....
CCCXGBCUPi
SkillMaxx / Security / Crowdsec
Crowdsec
Operational skill for installing, configuring, operating, and debugging CrowdSec (cscli, LAPI/CAPI, hub, bouncers, WAF/AppSec) across bare-metal, Docker, and Kubernetes.
- Stars
- ★ 25
- Last updated
- Hands-on tests
- Tested ✓ in 2 of 5
Install
Tested ✓✓ Verified from docsOfficial docs ↗
/plugin install crowdsec@claude-plugins-officialTested ✓ on 2026-10-16: installed and loaded in a throwaway sandbox with no credentials.
Log excerpt
Installing plugin "crowdsec@claude-plugins-official"...✔ Successfully installed plugin: crowdsec@claude-plugins-official (scope: user)
$ verify:
❯ crowdsec@claude-plugins-official
Status: ✔ enabled1 run, latest 2026-10-16
Not yet tested
No official Codex instructions yet. We haven't found docs saying this works in Codex.
Know it works? Tell us →Tested ✓✓ Verified from docsOfficial docs ↗
Auto-loaded from your Claude Code plugins (no extra setup per xAI docs)Tested ✓ on 2026-10-16: installed and loaded in a throwaway sandbox with no credentials.
Log excerpt
Installed 1 plugin(s) from claude-plugins-official: crowdsec $ verify: crowdsec-skill-91465938: crowdsec [git: https://github.com/crowdsecurity/crowdsec-skill.git] (claude-plugins-official)
1 run, latest 2026-10-16
Not yet tested
No official Cursor instructions yet. We haven't found docs saying this works in Cursor.
Know it works? Tell us →Not yet tested
No official Pi instructions yet. We haven't found docs saying this works in Pi.
Know it works? Tell us →README
View on GitHub ↗<div align="center">
<img src="https://raw.githubusercontent.com/crowdsecurity/crowdsec-docs/main/crowdsec-docs/static/img/crowdsec_logo.png" alt="CrowdSec" width="280">
CrowdSec Skill for Claude Code & Codex
The official CrowdSec plugin for AI coding agents. It bundles two
Agent Skills that let Claude Code,
Codex, and Claude.ai install, configure, operate, and debug
CrowdSec — the engine, cscli, bouncers, and the WAF/AppSec
component — across bare-metal/systemd, Docker, pfSense/OPNsense, and Kubernetes/Helm.
</div>
This plugin bundles two Agent Skills:
crowdsec— a hands-on CrowdSec operator. Stand up an engine, wire a bouncer, enable the WAF, or figure out why nothing's getting blocked. It knows thecsclicommands, the config layout, the failure modes, and the safe way through each across bare-metal/systemd, Docker, pfSense/OPNsense and Kubernetes/Helm.crowdsec-service-api— drives the premium Console Service API (cloud) on your behalf with your API key: create and populate blocklists/allowlists, wire firewall/appliance integrations, pull remediation ROI metrics, and manage org-level decisions — every state change gated behind an explicit confirmation.
What it covers
crowdsec (operational):
| Area | Covered |
|---|---|
| Install | bare-metal/systemd · Docker · Kubernetes/Helm · pfSense/OPNsense · Console enrollment |
| Bouncers | firewall (iptables/nftables/ipset) · nginx · traefik · caddy · apache · and more |
| WAF / AppSec | deploy · configure · troubleshoot the AppSec component · bot detection |
| Hub | install collections/parsers/scenarios · update · debug |
| Configure | acquisition · profiles & ban durations · notifications · allowlists |
| Operate | health checks & smoke tests · upgrades & rollback · multi-server / remote LAPI / mTLS |
| Debug | logs not parsing · no alerts firing · bouncer not blocking · specific errors |
Preview from the source repo. Images are removed.
Similar alternatives
Crowdstrike Falcon Fusion
CrowdStrike Falcon Fusion skills for authoring, deploying, and executing Fusion workflows. Includes live...
CCCXGBCUPi
Jfrog
Use the JFrog Platform from Claude Code: Artifactory repos and artifacts, security findings and exposures,...
CCCXGBCUPi
Stackhawk Hawkscan
Configure, run, and interpret HawkScan DAST results inside Claude Code. Generates stackhawk.yml configs, runs...
CCCXGBCUPi