elastic/example-mcp-app-security
Skill Claude CodeCodex
Generate sample security events, attack scenarios, and synthetic alerts for Elastic Security. Use when demoing, populating dashboards, testing detection rules, setting up a POC, or when the user asks for test data, demo data, or sample alerts.
Plugin Claude Code
Elastic skills for Claude Code.
Skill Claude CodeCodex
Anonymize and sanitize customer-provided log files. Performs a line-by-line review and replaces all sensitive values inline, preserving log structure and format exactly — never reformats, re-indents, or restructures content. Use when sanitizing customer logs, sample events, or test fixtures. Invoke manually with…
Skill Claude CodeCodex
Use for all CEL and mito work on integrations that collect from APIs — writing CEL programs, cel.yml.hbs templates, manifest configuration, mock-first development with the mito CLI, system test mock setup, and answering CEL/mito questions. Load this skill whenever any data stream uses the cel input type.
Skill Claude CodeCodex
Use when creating a new Elastic integration package, scaffolding data streams, answering package layout or structure questions, or running the end-to-end integration build workflow. Covers package topology, scaffold commands, post-scaffold edits, and full orchestration of CEL/pipeline/test subagents.
Skill Claude CodeCodex
Use when creating or reviewing Kibana assets in packages, including dashboard export structure, naming, and data stream alignment.
Skill Claude CodeCodex
Use when reviewing dashboard JSON changes in a PR or branch. Extracts structured descriptions with kbdash, compares before/after, and checks guideline compliance.
Skill Claude CodeCodex
Use when defining field mappings for data streams, populating ecs.yml with ECS field references, selecting ECS categorization values, choosing custom field types, or troubleshooting mapping validation failures.
Skill Claude CodeCodex
Use when developing or validating Elastic integrations with elastic-package commands such as build, check, lint, format, test, stack, service, install, profiles, and benchmark.
Skill Claude CodeCodex
Use when adding or auditing ECS entity. fields (entity inventory / entity store) on Elastic integrations — classifying a data stream as entity vs event, mapping vendor fields to entity.attributes., entity.lifecycle., and entity.relationships., or running an entity-coverage gap analysis on an existing package. Invoke…
Skill Claude CodeCodex
Use when designing or modifying Elasticsearch ingest pipelines, including single-path parsing, branching logic, sub-pipelines, enrichment processors, and robust onfailure handling.
Skill Claude CodeCodex
Input template configuration for Elastic integrations. Covers agent stream templates (agent/stream/.yml.hbs) for all non-CEL input types: HTTPJSON, AWS S3, CloudWatch, Azure Blob, Azure EventHub, GCS, GCP Pub/Sub, TCP, UDP, HTTP Endpoint, Filestream, Logfile, Journald, Winlog, and WebSocket. For CEL input programs…
Skill Claude CodeCodex
Use when creating, running, or debugging elastic-package tests — pipeline fixture authoring and expected output, system tests with mock API wiring, and script tests for failure paths and upgrades. Load the reference file for the test type you are working on.
Skill Claude CodeCodex
Use when reviewing, fixing, or improving an EXISTING Elastic integration package. Covers quality reviews, targeted fixes (pipelines, field mappings, CEL programs, manifests, changelogs), full improvement passes, and minor adjustments. Use create-integration instead when creating a new package or adding a new data…
Skill Claude CodeCodex
Package specification compliance for Elastic integration packages. Covers manifest structure (formatversion, conditions, variables, routing rules), changelog schema and semantic version bumps, and alignment with the upstream elastic/package-spec. Use when building or reviewing manifest.yml, changelog.yml, or debugging…
Skill Claude CodeCodex
Research a vendor, product, or feature to collect all information needed before building an Elastic integration. Investigates data collection methods, API or log documentation, sample data formats, field schemas, ECS mapping candidates, and configuration requirements. Outputs a structured research brief to…
Skill Claude CodeCodex
Standalone quality review for Elastic integrations. Classifies files by domain, loads domain-specific skills and review checklists, applies cross-domain consistency rules, CEL version verification, API conformance, and severity calibration. Input-agnostic: works on local packages, PR diffs, or branch comparisons. Use…
elastic/semantic-code-search-mcp-server
MCP server Claude CodeCodexCursor +2
MCP server "semantic-code-search-mcp-server" as configured in elastic/semantic-code-search-mcp-server. Runs locally from the semantic-code-search-mcp-server npm package.
Agent
Agent "default-agent" from elastic/ai-github-actions, covering repository context, development, code style, prompt fragments and instructions.
Instructions file CodexOpenCode
AGENTS.md instructions for elastic/ai-github-actions, covering ai github actions, automation runtime, github agent workflows, claude workflows (composite actions) and lock files.
Cursor rule Cursor
../../AGENTS.md.
Instructions file CodexOpenCode
Jingra Java project instructions.
Instructions file
Instructions for elastic/jingra, a project described as: Competitive Benchmarking Framework.