elasticsearch-index-design
Pass
Audited by Gen Agent Trust Hub on Sep 4, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill identifies a potential surface for indirect prompt injection as it processes external mapping data and user-provided requirements to generate configurations.
- Ingestion points: Processes data from existing indices via the
elastic es indices get-mappingcommand and user-provided access patterns. - Boundary markers: The instructions do not define specific delimiters to isolate external data from the prompt logic.
- Capability inventory: The skill utilizes the
elasticCLI to perform operations such as index creation and reindexing. - Sanitization: No explicit input validation or sanitization mechanisms are defined for the ingested mapping data.
- [SAFE]: The skill relies on the official
elasticCLI, which is a tool from a well-known and trusted vendor. All documentation and external references point to official GitHub repositories. The instructions explicitly warn against manual API calls and credential guessing, ensuring that interactions with the Elasticsearch environment follow established security protocols.
Audit Metadata