skills/mukul975/anthropic-cybersecurity-skills/deploying-edr-agent-with-crowdstrike/Gen Agent Trust Hub
deploying-edr-agent-with-crowdstrike
Pass
Audited by Gen Agent Trust Hub on Mar 16, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides documentation and scripts for managing CrowdStrike Falcon EDR across multiple platforms. All external references are to official CrowdStrike domains (falcon.crowdstrike.com, api.crowdstrike.com) or reputable technical resources such as MITRE ATT&CK and NIST.
- [SAFE]: The Python scripts (
scripts/agent.pyandscripts/process.py) utilize the officialcrowdstrike-falconpylibrary and follow industry best practices for handling API credentials via environment variables and command-line arguments rather than hardcoding secrets. - [SAFE]: The deployment instructions involve administrative commands (
sudo,sc query,reg query) and network communication tots01-b.cloudsink.net. These operations are consistent with the skill's primary purpose of installing and configuring endpoint detection and response (EDR) software. - [SAFE]: No malicious patterns, such as obfuscation, unauthorized data exfiltration, or suspicious remote code execution from untrusted sources, were identified during the analysis.
Audit Metadata