The Agent Skills Directory

[COMMAND_EXECUTION]: The skill operates by executing commands via the elastic CLI to interact with Kibana and Elasticsearch (e.g., elastic stack kb workflows get-workflows).
[EXTERNAL_DOWNLOADS]: The instructions refer users to the official elastic CLI repository on GitHub for setup and configuration, which is a resource from a trusted vendor.
[DYNAMIC_EXECUTION]: The skill generates YAML workflow definitions and executes them using the Kibana /api/workflows/test endpoint. To mitigate risks, the skill includes strict guidelines to replace side-effecting steps (like Slack notifications or database writes) with console logging during the testing phase.
[INDIRECT_PROMPT_INJECTION]: The skill identifies event.alerts as a primary ingestion point for untrusted data from the Kibana environment. It addresses the potential for injection by instructing the agent to use Liquid templating and to implement guarded logic paths to separate manual inputs from automated alert data.

kibana-workflows