cloud-onboarding
Pass
Audited by Gen Agent Trust Hub on Sep 3, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill translates natural language requests into administrative actions on Elastic Cloud, creating an interface for managing identities and access.
- Ingestion points: Processes user requests for access management in
SKILL.md(e.g., "add Alice to my search project"). - Boundary markers: Implements a structured decomposition process and mandates existing state verification to ensure requested actions are appropriate.
- Capability inventory: Utilizes the
elasticCLI to perform organization member management, role assignments, and API key management. - Sanitization: Explicitly requires human confirmation for destructive actions like revoking members or keys and prohibits secret sharing in the chat interface.
- [COMMAND_EXECUTION]: Orchestrates actions through the official
elasticCLI tool, which is a trusted vendor resource. - Evidence:
SKILL.mdmaps HTTP shorthand operations to CLI commands such aselastic cloud orgsandelastic es security. - [EXTERNAL_DOWNLOADS]: Interacts with official vendor API endpoints for control-plane operations.
- Evidence: Communicates with
https://api.elastic-cloud.comas documented inreferences/api-reference.md.
Audit Metadata