elasticsearch
Audited by Socket on Feb 19, 2026
1 alert found:
Security[Skill Scanner] Backtick command substitution detected All findings: [HIGH] command_injection: Backtick command substitution detected (CI003) [AITech 9.1.4] [HIGH] command_injection: Backtick command substitution detected (CI003) [AITech 9.1.4] [HIGH] command_injection: Backtick command substitution detected (CI003) [AITech 9.1.4] This is a benign operator reference for interacting with Elasticsearch/Kibana via curl. It legitimately requires an API key and cluster URL and sends those directly to the user-specified ES_URL. There are no signs of obfuscation, hidden data exfiltration, third-party proxies, or malicious code. The security considerations are operational: the examples include destructive APIs and rely on users to manage API keys securely. Treat the commands as powerful administrative actions and protect the ES_API_KEY (do not commit to source control, use least-privilege API keys).