This kit professionalizes SPL to CrowdStrike LogScale translation with Claude.
This repository now includes a project skill at:
.claude/skills/spl2cql-detection/SKILL.md
In Claude Code, this skill can be:
- auto-triggered when you ask for SPL -> CQL translation/debug/review
- invoked directly with
/spl2cql-detection
Optional workflow wrapper bundled with the skill:
.claude/skills/spl2cql-detection/scripts/run_workflow.sh --helpNote: the skill uses ai/, docs/, and scripts/ directly as the single source of truth (no mirrored prompt/docs files inside .claude/skills).
CLAUDE.md: persistent project instructionsai/prompts/: structured prompt templatesai/examples/: validated examplesai/snippets/: reusable editor snippets (VS Code)docs/: project conventions and mappingsscripts/translate_workflow.py: automation wrapperscripts/run_examples.sh: sample executions
- creates a translation prompt from a template
- optionally creates debug and review prompts
- stores run artifacts as markdown/json
- keeps each case organized under
runs/
- Save your SPL to a file
- Run the translation command
- Paste the generated prompt into Claude / Claude Code
- Save the response to the run folder
- If needed, run debug mode with the exact error