kibana-context-engine
Pass
Audited by Gen Agent Trust Hub on Oct 28, 2026
Risk Level: SAFE
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill retrieves Knowledge Indicators (KIs) from Elasticsearch indices to provide context for answering user questions. This is the primary function of the skill.
- Ingestion points: Results from the
_queryAPI call described inSKILL.md. - Boundary markers: The instructions specify that the
_describeblock is for reading, not parsing, and suggest summarizing the results rather than outputting raw data. - Capability inventory: The skill uses the
elasticCLI for data retrieval operations. - Sanitization: Queries are constructed using named parameters to prevent ES|QL injection.
- [EXTERNAL_DOWNLOADS]: The skill directs users to the official
elasticCLI repository for installation and configuration. - Evidence: Reference to
https://github.com/elastic/cli#configurationinSKILL.md. - Context: The resource is an official tool from the vendor 'elastic'.
Audit Metadata