Manage Falcon Next-Gen SIEM lookup files (CSV/JSON/TXT) for CQL match() queries. TRIGGER when user asks to create, list, update, or delete lookup files, or needs help with CQL match() function. DO NOT TRIGGER for Fusion workflows, action discovery, or workflow deployment — use the workflows/authoring/deployment skills.
Install
npx skills add CrowdStrike/fusion-skills --skill lookup-filesnpx skills add CrowdStrike/fusion-skills --skill lookup-files -a claude-code -gnpx skills add CrowdStrike/fusion-skills --skill lookup-files -a codex -ggemini skills install https://github.com/CrowdStrike/fusion-skills.git --path skills/lookup-filesgh skill install CrowdStrike/fusion-skills lookup-filesgit clone --depth 1 https://github.com/CrowdStrike/fusion-skills /tmp/CrowdStrike__fusion-skills
mkdir -p ~/.claude/skills ~/.agents/skills
cp -R /tmp/CrowdStrike__fusion-skills/skills/lookup-files ~/.claude/skills/lookup-files # Claude Code
cp -R /tmp/CrowdStrike__fusion-skills/skills/lookup-files ~/.agents/skills/lookup-files # Codex, Cursor, Gemini CLI, Copilot, OpenCode