elasticsearch
Pass
Audited by Gen Agent Trust Hub on Jun 22, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill uses
curlto interact with Elasticsearch APIs andpython3to manage environment configurations. These are standard operations for the skill's purpose. The use ofevalinSKILL.mdis strictly limited to loading environment variables produced by the internalscripts/envs.pyscript. - [CREDENTIALS_UNSAFE]: The skill manages credentials using environment variables (
ES_USERNAME,ES_PASSWORD) and a localenvironments.jsonfile. The management scriptscripts/envs.pyautomatically sets file permissions to600on Unix systems to protect this data. Documentation explicitly warns against hardcoding secrets. - [DATA_EXFILTRATION]: While the skill communicates with external Elasticsearch clusters, the destination URLs are configured and managed by the user via the
scripts/envs.pyscript. There is no evidence of unauthorized data transmission to third-party domains. - [SAFE]: The code follows defensive programming practices, including proper shell quoting in the
scripts/envs.pyutility to prevent command injection when exporting environment variables.
Audit Metadata