kibana-vega

Fail

Audited by Runlayer on Mar 15, 2026

Risk Level: HIGH
Scan Summary
Max Score
93%
Files
9
Flagged
4
Chunks
18
Flagged Files (4)
kibana-vega/SKILL.mdHIGH
93.2%

Risky tool definition detected

**Use JSON, not HJSON triple-quotes** — `'''` multi-line strings cause parse errors in Kibana; use single-line queries with escaped quotes `\"` 2.

kibana-vega/scripts/kibana-vega.jsMEDIUM
89.1%

Tool passed security scan

Privilege Escalation

Destructive Action

Shadow Persistence

kibana-vega/references/vega-lite-reference.mdMEDIUM
75.8%

Risky tool definition detected

Don't Set Width/Height - Use Autosize **Problem:** Kibana controls the panel size. Explicit dimensions cause conflicts.

kibana-vega/references/vega-esql-reference.mdLOW
71.7%

Tool passed security scan

Risky tool definition detected

Use single-line queries with escaped quotes: ```json { "data": { "url": { "%type%": "esql", "query": "FROM logs-* | WHERE @timestamp >= ?_tstart AND @timestamp <= ?_tend | STATS total = COUNT(), errors = COUNT(level == \"error\" OR NULL) BY service.name | RENAME service.name AS service | EVAL error_rate = errors / total * 100 | SORT error_rate DESC | LIMIT 20" } } } ``` ## Comparison: ES|QL vs Elasticsearch DSL ### ES|QL Approach ```hjson { data: { url: { "%type%": "esql" query: "FROM logs-* | S

Passed Files (5)Click to expand
kibana-vega/examples/time-series-line.hjsonOK
16.2%

Tool passed security scan

kibana-vega/examples/top-n-bar.hjsonOK
9.8%

Tool passed security scan

kibana-vega/references/dashboard-layout-reference.mdOK
9.1%

Tool passed security scan

kibana-vega/examples/heatmap.hjsonOK
3.7%

Tool passed security scan

kibana-vega/package.jsonOK
2.5%

Tool passed security scan

Audit Metadata
Max File Score
93%
Classification
UNKNOWN_SERVER
Files Scanned
9
Files Flagged
4
Chunks Analyzed
18
Analyzed
Mar 15, 2026, 03:08 PM
Security Audit — runlayer — kibana-vega