executing-plans
executing-plans
Use when executing an implementation plan in the current session as the implementer yourself — your human partner chose inline execution, or no subagent tool is available
crowdstrike-inspector-expertInterpret CrowdStrike Falcon findings for sensor coverage, policy visibility, and host group scoping.
Independent GitHub snapshot · Automated classification · Original documentation governs
Use this skill when reviewing crowdstrike-inspector output.
Findings are written to ~/.cache/claude-grc/findings/crowdstrike-inspector/<run_id>.json.
Key SCF mappings:
END-03: endpoint sensor coverageCFG-02: prevention policy visibilityMON-01.2: detection policy visibilityAST-02: host-group scoping visibilityTreat inconclusive as an API permission or plan coverage gap, not a pass.