elasticsearch

Pass

Audited by Gen Agent Trust Hub on Jun 22, 2026

Risk Level: SAFE
Full Analysis
  • [COMMAND_EXECUTION]: The skill uses curl to interact with Elasticsearch APIs and python3 to manage environment configurations. These are standard operations for the skill's purpose. The use of eval in SKILL.md is strictly limited to loading environment variables produced by the internal scripts/envs.py script.
  • [CREDENTIALS_UNSAFE]: The skill manages credentials using environment variables (ES_USERNAME, ES_PASSWORD) and a local environments.json file. The management script scripts/envs.py automatically sets file permissions to 600 on Unix systems to protect this data. Documentation explicitly warns against hardcoding secrets.
  • [DATA_EXFILTRATION]: While the skill communicates with external Elasticsearch clusters, the destination URLs are configured and managed by the user via the scripts/envs.py script. There is no evidence of unauthorized data transmission to third-party domains.
  • [SAFE]: The code follows defensive programming practices, including proper shell quoting in the scripts/envs.py utility to prevent command injection when exporting environment variables.
Audit Metadata
Risk Level
SAFE
Analyzed
Jun 22, 2026, 12:58 AM
Security Audit — agent-trust-hub — elasticsearch