elasticsearch
Pass
Audited by Gen Agent Trust Hub on Oct 6, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill references official-style plugin installation commands for the 'IK' and 'Pinyin' analyzers (e.g.,
elasticsearch-plugin install https://github.com/medcl/elasticsearch-analysis-ik/...). These are well-known, community-standard plugins for Chinese language processing in Elasticsearch, hosted on GitHub. - [COMMAND_EXECUTION]: Provides a local monitoring shell script (
es_health_check.sh) designed to query a local Elasticsearch instance viacurl. The script is transparent, uses standard monitoring commands, and contains no malicious logic. - [REMOTE_CODE_EXECUTION]: Instructions include standard plugin installation commands. While these involve downloading and executing code, they target specific, well-known community resources and are a standard part of Elasticsearch setup.
- [DATA_EXFILTRATION]: No evidence of data exfiltration. Configuration templates for Logstash and Filebeat use standard environment variable placeholders (e.g.,
${ES_PASSWORD}) or dummy credentials (e.g.,password => "pass") for demonstration purposes.
Audit Metadata