---
name: grcengclub/crowdstrike-inspector-expert
source: https://app.decimal.ai/s/grcengclub-crowdstrike-inspector-expert@1/SKILL.md
source_sha256: 90f4872daaa1
---

# CrowdStrike Inspector Expert

Use this skill when reviewing `crowdstrike-inspector` output.

Findings are written to `~/.cache/claude-grc/findings/crowdstrike-inspector/<run_id>.json`.

Key SCF mappings:

- `END-03`: endpoint sensor coverage
- `CFG-02`: prevention policy visibility
- `MON-01.2`: detection policy visibility
- `AST-02`: host-group scoping visibility

Treat `inconclusive` as an API permission or plan coverage gap, not a pass.