Update to CrowdStrike AgentWorks

{
  "description": "Configure credentials for Charlotte AI AgentWorks API access. Guides users through manual TOML configuration or environment variable setup. TRIGGER when user explicitly asks to \"set up Charlotte AI AgentWorks\", \"configure credentials\", or has auth errors. DO NOT TRIGGER for general Charlotte AI AgentWorks usage (orchestrator handles routing).\n",
  "included_files": [],
  "name": "setup",
  "skill_md_contents": "---\nname: setup\ndescription: >\n  Configure credentials for Charlotte AI AgentWorks API access. Guides users through manual TOML\n  configuration or environment variable setup.\n  TRIGGER when user explicitly asks to \"set up Charlotte AI AgentWorks\", \"configure credentials\", or has auth errors.\n  DO NOT TRIGGER for general Charlotte AI AgentWorks usage (orchestrator handles routing).\nversion: 1.0.1\nupdated: 2026-10-21\ntags: [agentworks, setup, credentials, authentication]\nauthor: CrowdStrike\nlicense: MIT\ncompatibility: Claude Code >=1.0\nmetadata:\n  category: configuration\n---\n\n# Charlotte AI AgentWorks Setup\n\n## Configuration\n\nThis plugin requires Falcon API OAuth 2.0 credentials. Configure using one of the methods below.\n\n**Test authentication:**\n```bash\nscripts/python.sh common/scripts/auth.py\n```\n\nShould authenticate 5 FalconPy clients (KnowledgeBases, KnowledgeBaseFiles, KnowledgeBaseAuditEvents, Agents, AgentInvocation), all sharing one token.\n\n## Setup Methods\n\n### Option 1: TOML Profile (Recommended)\n\nCreate `~/.cache/crowdstrike-charlotte-ai-agentworks/credentials.toml`:\n\n```toml\ndefault = \"us-1\"\n\n[us-1]\nclient_id = \"your-client-id-here\"\nclient_secret = \"your-client-secret-here\"\nbase_url = \"https://api.crowdstrike.com\"  # or your cloud URL\n```\n\nSet permissions:\n```bash\nmkdir -p ~/.cache/crowdstrike-charlotte-ai-agentworks\nchmod 700 ~/.cache/crowdstrike-charlotte-ai-agentworks\nchmod 600 ~/.cache/crowdstrike-charlotte-ai-agentworks/credentials.toml\n```\n\n### Option 2: Environment Variables\n\n```bash\nexport FALCON_CLIENT_ID=<your-id>\nexport FALCON_CLIENT_SECRET=<your-secret>\nexport FALCON_BASE_URL=https://api.crowdstrike.com  # optional, defaults to US-1\n```\n\n## Required API CSRN Permissions\n\nCharlotte AI AgentWorks uses these CSRN permissions:\n- `csrn:charlotte-ai:agent:definition` (read + write)\n- `csrn:charlotte-ai:agent:invocation` (assert/execute)\n- `csrn:charlotte-ai:agent:knowledge-base` (read + write)\n- `csrn:charlotte-ai:agent:template` (read)\n- `csrn:charlotte-ai:agent:metrics` (read)\n\n## Verification\n\nAfter setup, run:\n```bash\ncd /path/to/agentworks-skills\nscripts/python.sh common/scripts/auth.py\n```\n\nShould see:\n```\n✓ Authentication successful (KnowledgeBases client)\n✓ Authentication successful (KnowledgeBaseFiles client)\n✓ Authentication successful (KnowledgeBaseAuditEvents client)\n✓ Authentication successful (Agents client)\n✓ Authentication successful (AgentInvocation client)\n```\n\n## Troubleshooting\n\n**\"No credentials found\"**\n- Check TOML file exists and has correct profile\n- OR set env vars\n\n**\"Authentication FAILED\"**\n- Verify client_id/secret are correct\n- Check base_url matches your Falcon cloud (us-1, us-2, eu-1, etc.)\n- Ensure API client has required scopes\n\n**\"token_expired() returns True\"**\n- Check network connectivity to Falcon API\n- Verify client_id/secret haven't been rotated\n- Run `python common/scripts/auth.py` -- as of this version it prints the real API error\n  (e.g. bad credentials, missing scope) instead of just \"could not obtain token\"\n\n**Authentication fails with a certificate/TLS error during login** (e.g.\n`CERTIFICATE_VERIFY_FAILED: unable to get local issuer certificate`) -- distinct from the\npackage-install certificate errors below; this happens on the live API call itself, often\nbehind a TLS-intercepting proxy (e.g. Zscaler) common in corporate environments.\n- Check whether your organization requires a custom CA bundle for outbound HTTPS, and that\n  Python's trust store (or `SSL_CERT_FILE`/`REQUESTS_CA_BUNDLE`) points at it\n- Confirm a plain `curl` to your `base_url` succeeds from the same shell/environment first --\n  if that also fails, this is a network/proxy config issue outside the plugin, not an\n  Charlotte AI AgentWorks credential problem\n- These settings must be configured outside the AI coding agent; restart the coding agent\n  terminal after configuring so it receives the updated environment\n\n**Package installation reports access, certificate, or registry errors**\n- Refer the user to their organization's documentation for setting up a Python environment.\n- Their organization may require an approved package registry or specific certificates.\n- These settings must be configured outside the AI coding agent.\n- After configuration, restart the coding agent terminal so it receives the updated environment.\n- Some workstation changes may require signing out and back in before restarting the agent.\n\n## Security\n\n- **Never paste credentials into chat**\n- Credentials go only into the TOML file (via your editor) or env vars\n- TOML file should be `chmod 600`\n- TOML directory should be `chmod 700`\n- Never commit credentials to git\n\n## Multi-Cloud Support\n\nCharlotte AI AgentWorks supports all Falcon clouds. `base_url` may be any Falcon cloud URL,\nincluding custom/internal environments; it is not restricted to this list:\n- US-1: `https://api.crowdstrike.com` (default)\n- US-2: `https://api.us-2.crowdstrike.com`\n- EU-1: `https://api.eu-1.crowdstrike.com`\n- US-GOV-1: `https://api.laggar.gcw.crowdstrike.com`\n"
}