elasticsearch
Pass
Audited by Gen Agent Trust Hub on Sep 23, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes
curlcommands to interact with a local Elasticsearch instance atlocalhost:9200. These include GET, PUT, POST, and DELETE requests for cluster state monitoring, index creation, and document management. - [DATA_EXFILTRATION]: All network requests are directed towards
localhost. No attempts to send data to external or unknown servers were found. - [CREDENTIALS_UNSAFE]: The provided commands do not contain any hardcoded API keys, tokens, or credentials. Administrative tasks are performed against a local endpoint without embedded secrets.
- [REMOTE_CODE_EXECUTION]: The skill does not perform any downloads of external scripts or binaries for execution.
- [OBFUSCATION]: The instructions and code blocks are written in plain text, with no evidence of encoding, zero-width characters, or hidden payloads.
Audit Metadata