elastic/agent-skills

What is Elastic Agent Skills?

Elastic Agent Skills is a library of “skills” – small, self‑contained packages that teach AI coding assistants (e.g., Claude Code, GitHub Copilot, Cursor, Gemini CLI) how to work correctly with the Elastic stack. Each skill lives in its own folder with a SKILL.md that describes the task, the required context, and the API calls the agent may perform.

Core idea

• Skill = instruction + tooling – the agent gets a concise, vetted recipe for a concrete operation (e.g., create an Elastic Cloud project, ingest a CSV into Elasticsearch, enable Kibana audit logging).
• Standardised – they follow the open Agent Skills specification (see agentskills.io), so any compatible agent can discover and run them.
• Technical preview – early‑stage, actively updated, and meant to be installed selectively.

What you can do with it

The repository ships dozens of ready‑to‑use skills grouped by product area:

Category	Example skills	Typical use‑case
Cloud	cloud-create-project, cloud-access-management	Provision Elastic Cloud Serverless projects, manage users and API keys.
Elasticsearch	elasticsearch-esql, elasticsearch-file-ingest, elasticsearch-authz	Run ES
Kibana	kibana-dashboards, kibana-alerting-rules, kibana-workflows	Declare dashboards, create alert‑as‑code, author or test Kibana workflow YAML.
Observability	observability-edot-java-instrument, observability-logs-search, observability-llm-obs	Add OpenTelemetry instrumentation to services, search logs with ES
Security	security-alert-triage, security-case-management	Triage alerts, create and update SOC cases, generate synthetic security data.

Each skill is designed to be idempotent and to use the Elastic REST APIs (or Terraform where noted), so the agent can safely call it from a chat or IDE context.

How to install

The README lists three supported installation paths:

1. Claude Code plugin – add the repo as a marketplace source and install the desired skill bundles via claude plugin install ….
2. GitHub Copilot CLI – similar workflow with copilot plugin marketplace add ….
3. npx skills CLI (recommended) – a single‑command installer from the Vercel‑labs skills tool, e.g.

   npx skills add elastic/agent-skills          # interactive picker
   npx skills add elastic/agent-skills@elasticsearch-esql   # single skill
   npx skills add elastic/agent-skills -a cursor -a claude-code   # target agents
   

The docs advise installing only the cloud and elasticsearch‑auth skills as a foundation, then adding the ones you actually need to avoid “context bloat”.

Security & safety notes

Because these skills run with real credentials and can execute shell commands, the README includes a short threat‑model checklist:

• Perform your own risk assessment and limit API‑key privileges.
• Be aware that data sent to the LLM may leave the local environment.
• Test in a non‑production cluster or a trial Serverless project first.
• Review the skill source (they are open‑source) before running.

Who should use this?

• Developers building or maintaining Elastic‑based search, observability, or security solutions who want their AI assistant to issue correct API calls instead of guessing.
• Ops / SRE teams that want to automate routine Elastic Cloud or Kibana tasks via a conversational interface.
• AI‑tooling vendors that support the Agent Skills spec and need a ready‑made catalog of Elastic‑specific capabilities.

---

Bottom line: Elastic Agent Skills is a genuine, Elastic‑maintained collection of reusable, API‑driven “skills” that plug into modern AI coding agents, letting those agents perform real Elastic‑stack operations safely and reliably.