elasticsearch-esql
Pass
Audited by Gen Agent Trust Hub on Jun 28, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill provides instructions for an optional local development setup that involves downloading a script from the official Elastic repository on GitHub. The documentation explicitly discourages unsafe execution patterns and provides a secure workflow using pinned versions and SHA-256 checksum verification.
- [CREDENTIALS_UNSAFE]: Authentication with Elasticsearch is handled via environment variables such as API keys and passwords. The skill does not contain hardcoded credentials and provides clear guidance for users to manage secrets securely using environment files with restricted permissions.
- [COMMAND_EXECUTION]: The core functionality involves executing ES|QL queries through a Node.js script that uses the official @elastic/elasticsearch client library. The implementation does not use dangerous shell execution or evaluation functions for query processing.
- [DATA_EXFILTRATION]: The skill retrieves query results from a user-configured Elasticsearch cluster to provide them to the agent. This is the intended primary purpose of the skill and does not involve unauthorized data movement or exfiltration to third-party domains.
Audit Metadata