elasticsearch-attack

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 1.00). The skill includes explicit plaintext credentials (e.g., curl -u elastic:changeme, curl -u elastic:elastic, admin:admin and creating a user with "password":"password123"), which requires the LLM to output secrets verbatim, creating a high exfiltration risk.

CRITICAL E006: Malicious code pattern detected in skill scripts.

• Malicious code pattern detected (high risk: 1.00). This content is an explicit offensive playbook describing unauthorized access, data exfiltration, remote code execution, backdoor creation, and persistence techniques against Elasticsearch — clearly malicious intent and high-risk abuse.

MEDIUM W013: Attempt to modify system services in skill instructions.

• Attempt to modify system services in skill instructions detected (high risk: 1.00). The skill is an explicit exploitation guide that directs the agent to perform remote RCE, create backdoor users, register snapshot repositories and restore data, modify ingest pipelines and delete indices — all actions that change a target system's state and enable compromise.