kibana-streams
Pass
Audited by Gen Agent Trust Hub on Apr 29, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill is authored by 'elastic' and interacts exclusively with 'elastic.co' domains and standard Kibana API endpoints, representing legitimate vendor functionality.
- [DATA_EXFILTRATION]: No evidence of unauthorized data access or exfiltration. The skill uses environment variables like
${KIBANA_URL}and placeholders such as<base64-api-key>for authentication, ensuring that sensitive credentials are not hardcoded and follow standard secret management practices. - [COMMAND_EXECUTION]: The skill provides template
curlcommands to assist the agent or user in calling the Kibana API. These commands are well-scoped to specific REST endpoints and do not contain patterns for arbitrary command execution or shell injection. - [SAFE]: Instructions include mandatory human confirmation and clear warnings regarding data loss before performing destructive lifecycle operations (e.g., disabling streams), which is a critical safety safeguard.
- [SAFE]: The skill mentions the requirement of specific Kibana privileges (
read_stream,manage_stream), promoting the principle of least privilege.
Audit Metadata