elasticsearch-esql

Privilege Escalation

Data Exfiltration

Supply Chain Compromise

Destructive Action

Resource Abuse

Tool passed security scan

Risky tool definition detected

Execute the policy (builds the enrich index) POST /_enrich/policy/customers_policy/_execute ``` Then the query uses `ENRICH` instead of `LOOKUP JOIN`: ```esql // 8.18+ — LOOKUP JOIN (preferred, no policy needed, easier to update) FROM orders | LOOKUP JOIN customers_lookup ON customer_id | KEEP order_id, customer_id, name, region, total // Pre-8.18 — ENRICH (requires policy setup above) FROM orders | ENRICH customers_policy ON customer_id WITH name, region | KEEP order_id, customer_id, name, regi

Prompt Injection

Tool passed security scan

Prompt Injection

Tool passed security scan

Risky tool definition detected

Prompt Injection

Tool passed security scan

Tool passed security scan