elasticsearch-anomaly-detection-explainer
Pass
Audited by Gen Agent Trust Hub on Sep 4, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes data from external Elasticsearch indices (".ml-anomalies-*") and user-provided records to explain anomaly scores, which represents a potential attack surface if the ingested data contains malicious instructions.
- Ingestion points: The skill retrieves record data using "elastic es search" and also processes records supplied directly by the user in the prompt as described in the "Process" section of SKILL.md.
- Boundary markers: The instructions do not define specific delimiters or instructions to ignore potential commands embedded within the data records.
- Capability inventory: The skill is configured to use the "elastic" CLI to perform cluster information checks, ML job configuration retrieval, and index searches.
- Sanitization: No explicit validation or sanitization logic is provided for the fields extracted from anomaly records before interpretation.
Audit Metadata