elasticsearch-file-ingest — security audits

Flagged by auditors

Independent security partners scan this skill's files for malicious content, prompt injection and risky patterns. Verdicts below come from the skills.sh audit program; each partner links to its full report.

• Gen Agent Trust Hub

  fail

  This skill is an official data ingestion tool for Elasticsearch developed by Elastic. It includes a setup script from a trusted vendor domain and supports custom data transformations through dynamic script loading. While it handles sensitive credentials and processes external data, these actions are consistent with its primary function as a developer utility.

  Risk: HIGHEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONDATA_EXFILTRATIONPROMPT_INJECTIONApr 4, 2026Full report

• Socket

  pass

  No alerts

  Apr 4, 2026Full report

• Snyk

  pass

  Risk: LOW · No issues

  Risk: LOWApr 4, 2026Full report

• ZeroLeaks

  pass

  2 findings · Score: 80/100

  Risk: LOWApr 16, 2026Full report