docs-skill-review
Pass
Audited by Gen Agent Trust Hub on Sep 29, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: Fetches content from authoritative Elastic documentation and release note sites (elastic.co) to verify skill accuracy.
- [INDIRECT_PROMPT_INJECTION]: The skill processes external content (user-provided skill files and remote documentation), which creates an attack surface for indirect prompt injection.
- Ingestion points: Reads local files defined in the $ARGUMENTS path and fetches remote content from Elastic documentation sites.
- Boundary markers: The instructions do not define specific delimiters or isolation markers for the ingested data.
- Capability inventory: The skill utilizes file system read operations (Read, Grep, Glob) and network tools (WebFetch, CallMcpTool). It lacks file-writing or arbitrary command execution capabilities.
- Sanitization: No explicit sanitization of external content is performed before processing.
Audit Metadata