docs-lens-chart-page
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill fetches documentation guidelines and UI information from Elastic's official documentation site (eui.elastic.co) and GitHub repository. These sources are owned by the skill's author (Elastic) and are trusted for the purpose of generating documentation.
- [INDIRECT_PROMPT_INJECTION]: The skill has an attack surface for indirect prompt injection as it ingests data from external source code and web pages to generate documentation. However, because it only targets trusted internal Elastic repositories and documentation, the risk is assessed as safe.
- Ingestion points: Reads files from Kibana's x-pack visualization directory and fetches guidelines from eui.elastic.co.
- Boundary markers: None explicitly defined to separate source data from instructions.
- Capability inventory: Uses Read, Grep, Glob, and Edit for file operations, and WebFetch for network access.
- Sanitization: No explicit sanitization of ingested content is described.
- [SAFE]: No evidence of prompt injection, hardcoded credentials, malicious persistence, or obfuscation was detected. The instructions follow standard Elastic documentation conventions and the tool usage is properly scoped to the documentation task.
Audit Metadata