kibana-streams

Pass

Audited by Gen Agent Trust Hub on Apr 29, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill is authored by 'elastic' and interacts exclusively with 'elastic.co' domains and standard Kibana API endpoints, representing legitimate vendor functionality.
  • [DATA_EXFILTRATION]: No evidence of unauthorized data access or exfiltration. The skill uses environment variables like ${KIBANA_URL} and placeholders such as <base64-api-key> for authentication, ensuring that sensitive credentials are not hardcoded and follow standard secret management practices.
  • [COMMAND_EXECUTION]: The skill provides template curl commands to assist the agent or user in calling the Kibana API. These commands are well-scoped to specific REST endpoints and do not contain patterns for arbitrary command execution or shell injection.
  • [SAFE]: Instructions include mandatory human confirmation and clear warnings regarding data loss before performing destructive lifecycle operations (e.g., disabling streams), which is a critical safety safeguard.
  • [SAFE]: The skill mentions the requirement of specific Kibana privileges (read_stream, manage_stream), promoting the principle of least privilege.
Audit Metadata
Risk Level
SAFE
Analyzed
Apr 29, 2026, 09:32 AM