elasticsearch

Warn

Audited by Socket on Feb 19, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

[Skill Scanner] Backtick command substitution detected All findings: [HIGH] command_injection: Backtick command substitution detected (CI003) [AITech 9.1.4] [HIGH] command_injection: Backtick command substitution detected (CI003) [AITech 9.1.4] [HIGH] command_injection: Backtick command substitution detected (CI003) [AITech 9.1.4] This is a benign operator reference for interacting with Elasticsearch/Kibana via curl. It legitimately requires an API key and cluster URL and sends those directly to the user-specified ES_URL. There are no signs of obfuscation, hidden data exfiltration, third-party proxies, or malicious code. The security considerations are operational: the examples include destructive APIs and rely on users to manage API keys securely. Treat the commands as powerful administrative actions and protect the ES_API_KEY (do not commit to source control, use least-privilege API keys).

Confidence: 92%Severity: 75%
Audit Metadata
Analyzed At
Feb 19, 2026, 06:45 PM
Package URL
pkg:socket/skills-sh/NikiforovAll%2Fclaude-code-rules%2Felasticsearch%2F@ef8de046407cf84800c9a6ee874dc7137b439c0b