Agent Skill trust card
Elastic Security Alert Triage Skill
Elastic · recorded version or snapshot 0.1.0
Gather context, classify threats, document findings, create cases, and acknowledge Elastic Security alerts with explicit operator review.
Metadata reviewed Elevated access
Source and identity
- Publisher
- Elastic
- Namespace
- Not recorded
- Recorded version / snapshot
- 0.1.0
- License
- Not recorded
- Artifact SHA-256
- Not recorded — a source snapshot alone does not pin an artifact
- Source repository
- https://github.com/elastic/agent-skills
Declared access
Review every permission against your own environment and least-privilege policy.
- read-write:user-approved-elastic-security-project
- network:elastic
- read:potentially-attacker-controlled-events
Required secrets
Generated examples use placeholders. Never paste real secrets into ToolDix.
No required secrets are declared in the current metadata.
Compatibility and connection
Clients
- Codex
- Claude
- Cursor
- OpenClaw
Runtimes
- portable-skill-host
Transports
- skill
Authentication
No authentication method is recorded.
Evidence
- Canonical source
canonical · observed Jul 15, 2026