Skills
Navigate
skills/kilo-org/kilo-marketplace/elasticsearch-file-ingest/Gen Agent Trust Hub

elasticsearch-file-ingest

Pass

Audited by Gen Agent Trust Hub on Jun 28, 2026

Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
  • [COMMAND_EXECUTION]: The scripts/ingest.js script employs dynamic JavaScript import() and require() calls to load custom transformation functions from local file paths specified by the --transform argument. This is a core feature enabling users to modify documents during ingestion.
  • [SAFE]: The skill instructions and code enforce the use of environment variables for sensitive connection details like ELASTICSEARCH_API_KEY and ELASTICSEARCH_PASSWORD, which prevents secrets from appearing in shell history or process listings.
  • [SAFE]: The provided local.patch and SKILL.md content show a proactive security design by removing insecure TLS options (rejectUnauthorized: false) in favor of proper certificate management using NODE_EXTRA_CA_CERTS.
Audit Metadata
Risk Level
SAFE
Analyzed
Jun 28, 2026, 05:50 PM
Security Audit — agent-trust-hub — elasticsearch-file-ingest