Falco Runtime 安全

安全社区

作者仓库星标 0
作者仓库 skills-registry

解读按原文结构重写，命令、链接、术语均保留；右侧可核对作者原始 SKILL.md

原文结构

Installation：Use the upstream install or setup path that matches your environment: cmake \ make -j$(($nproc-1)) falcounittests;
Source：Agent Skill Exchange Source: agentskillexchange/skills — distributed by TomeVault.

适用与边界

当前原文没有单列适用场景。
当前原文没有单列不适用场景或限制。

原文中的明确线索

要点：「--- > Source: agentskillexchange/skills — distributed by TomeVault.」
文件与命令：falco.org/docs/getting-started、falco.org/docs/setup/...、github.com/falcosecurity/falco、raw.githubusercontent.com/falcosecurity/falco/HEAD/README.md、agentskillexchange.com/skills/falco-runtime-security、agentskillexchange/skills、github.com/agentskillexchange/skills

流狐整理：以上内容来自当前 SKILL.md 的章节与原词；未补写作者没有声明的工具、兼容性或能力。

流狐档案作者与许可取自来源；运行、权限和网络为流狐检测或估算

流狐分类: 安全
作者声明 Agent: 未找到明确声明；不据此推断已兼容或已测试
静态检查: 88 / 100 · 启发式扫描，不代表运行安全
作者 / 版本 / 许可: @tomevault-io · 未声明 license
流狐 Token 估算: 低消耗
流狐接入估算: 需简单配置
是否需要外部 API Key: 未发现要求
检测到的系统要求: Docker
底层运行要求: Docker
检测到的文件与系统行为: 只读
检测到的网络行为: 仅限本地
安装命令数: 无（仅作为资料）

档案由构建时根据 SKILL.md 与安装命令自动衍生，可能与作者实际意图存在差异。

需要注意： 未限定 allowed-tools，默认拥有全部工具权限。

输出预览 falco-runtime-security.preview

作者没有在当前 SKILL.md 中定义固定输出样例。

SKILL.md SKILL.md

# Falco Runtime Security



## Installation

Use the upstream install or setup path that matches your environment:
- cmake \
- make -j$(($nproc-1)) falco_unit_tests;

Requirements and caveats from upstream:
- A demo environment is provided via a docker-compose file that can be started on a docker host which includes falco, falcosidekick, falcosidekick-ui and its required redis database. For more information see the [docker...
- As a security tool meant to consume a crazy high throughput of events per second, Falco needs to squeeze performance in all hot paths at runtime and requires deep control on memory allocation, which the Go runtime can...

Basic usage or getting-started notes:
- If you're new to Falco, begin your journey with our [Getting Started](https://falco.org/docs/getting-started/) guide. For production deployments, please refer to our comprehensive [Setup](https://falco.org/docs/setup/...
- As final recommendations before deploying Falco, verify environment compatibility, define your detection goals, optimize performance, choose the appropriate build, and plan for SIEM or data lake integration to ensure...
- ### Demo Environment

- Source: https://github.com/falcosecurity/falco
- Extracted from upstream docs: https://raw.githubusercontent.com/falcosecurity/falco/HEAD/README.md

## Source

- [Agent Skill Exchange](https://agentskillexchange.com/skills/falco-runtime-security/)

---
> Source: [agentskillexchange/skills](https://github.com/agentskillexchange/skills) — distributed by [TomeVault](https://tomevault.io).
<!-- tomevault:4.0:skill_md:2026-05-22 -->

证据边界与执行链路

作者原文负责流程事实；流狐只索引当前章节、要点、文件与命令。

章节    -> Installation → Source
要点    -> --- > Source: [agentskillexchange/skills](https://github.com/agentskillexchange/skills) — distributed by [TomeVault](https://tomevault.io).
文件/命令 -> falco.org/docs/getting-started · falco.org/docs/setup/... · github.com/falcosecurity/falco · raw.githubusercontent.com/falcosecurity/falco/HEAD/README.md · agentskillexchange.com/skills/falco-runtime-security · agentskillexchange/skills · github.com/agentskillexchange/skills
内容 SHA-256 -> 11cd1a6af115

原文结构

适用与边界

原文中的明确线索

Falco Runtime Security

Installation

Demo Environment

Source

讨论