---

name: crowdstrike-inspector-expert description: Interpret CrowdStrike Falcon findings for sensor coverage, policy visibility, and host group scoping. license: MIT

CrowdStrike Inspector Expert

Use this skill when reviewing crowdstrike-inspector output.

Findings are written to ~/.cache/claude-grc/findings/crowdstrike-inspector/<run_id>.json.

Key SCF mappings:

• END-03: endpoint sensor coverage
• CFG-02: prevention policy visibility
• MON-01.2: detection policy visibility
• AST-02: host-group scoping visibility

Treat inconclusive as an API permission or plan coverage gap, not a pass.