# Crowdstrike Inspector Expert

> Interpret CrowdStrike Falcon findings for sensor coverage, policy visibility, and host group scoping.

- Skill: `grcengclub/crowdstrike-inspector-expert` (Agent Skill)
- Install (CLI): `npx skillmds@latest add grcengclub/crowdstrike-inspector-expert`
- Raw SKILL.md: https://api.skillmd.com/api/skills/grcengclub/crowdstrike-inspector-expert/raw
- Safety review: pending
- Works with: Claude Code, Claude.ai, OpenAI Codex
- Category: Coding & Dev Tools
- License: MIT
- Author: grcengclub (https://skillmd.com/u/grcengclub)
- Updated: 2026-09-17
- Page: https://skillmd.com/skills/grcengclub/crowdstrike-inspector-expert

---


# CrowdStrike Inspector Expert

Use this skill when reviewing `crowdstrike-inspector` output.

Findings are written to `~/.cache/claude-grc/findings/crowdstrike-inspector/<run_id>.json`.

Key SCF mappings:

- `END-03`: endpoint sensor coverage
- `CFG-02`: prevention policy visibility
- `MON-01.2`: detection policy visibility
- `AST-02`: host-group scoping visibility

Treat `inconclusive` as an API permission or plan coverage gap, not a pass.