ClawHub
Back to skill

Security audit

Elasticsearch

Security checks for vulnerabilities and agentic risk

Overview

This Elasticsearch connector skill is purpose-aligned and clearly warns before writes or deletes, though approved actions can change or remove Elasticsearch data.

Install this only if you want an agent to operate your Elasticsearch connection through OOMOL. Review exact payloads before approving write or delete actions, keep the connected Elasticsearch account scoped to the data the agent should access, and treat the one-time CLI install/login steps as setup actions rather than routine commands.

SkillSpector

Vulnerability Patterns
  • Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (1)

Vague Triggers

Medium
Confidence
92% confidence
Finding
The skill is configured to trigger for ANY Elasticsearch request and explicitly directs the agent to use this skill instead of calling the API directly. That broad activation scope can cause over-selection of a powerful skill that includes write and destructive operations, increasing the chance that unrelated or insufficiently validated user requests are routed through a capability that can modify or delete data.

Static analysis

No suspicious patterns detected.