kibana-vega
Pass
Audited by Gen Agent Trust Hub on Apr 4, 2026
Risk Level: SAFEREMOTE_CODE_EXECUTIONCOMMAND_EXECUTION
Full Analysis
- [REMOTE_CODE_EXECUTION]: The documentation includes a command to download and run a shell script from the vendor's official website (https://elastic.co/start-local | sh) to set up a local development environment. This script is hosted on the official domain of the skill's author and is a standard utility.- [COMMAND_EXECUTION]: The utility script
scripts/kibana-vega.jsperforms network operations using thefetchAPI to interact with the Kibana Saved Objects and Status APIs for creating, updating, and deleting dashboards and visualizations.- [SAFE]: Sensitive information such as API keys and passwords are managed through environment variables (e.g., KIBANA_API_KEY, KIBANA_PASSWORD), which follows recommended security practices for secret management.- [SAFE]: The skill provides an optional configuration to disable TLS verification (KIBANA_INSECURE="true") for development environments. This practice is documented for development use only and helps users connect to local or test instances with self-signed certificates.
Audit Metadata