elasticsearch
Pass
Audited by Gen Agent Trust Hub on Jul 8, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses the
curlcommand-line tool to interact with Elasticsearch REST API endpoints. This is the intended purpose of the skill and uses standard shell commands to perform database operations. - [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and process data from an external source (Elasticsearch cluster), which presents a potential surface for indirect prompt injection if the retrieved data contains malicious instructions.
- Ingestion points: Data retrieved via
curloperations inSKILL.md. - Boundary markers: Absent.
- Capability inventory: Execution of
curlfor network requests inSKILL.md. - Sanitization: Absent.
Audit Metadata