Elastic Agent Skills

Elastic Agent Skills — built by the people who built Elastic — deliver native platform expertise directly to your AI coding agent. This is the official Agent Skills library, compatible with agentic IDEs such as Cursor, GitHub Copilot, Windsurf, Gemini CLI, and more. Skills follow the Agent Skills open standard.

[!NOTE] Technical Preview

These skills are in early release and under active development. Expect changes as skills are codified with robust evaluations and as the model landscape evolves. Check back frequently for updates.

About

This repository contains curated skills that are packages of instructions, context, and tooling that teach any AI agent how to correctly work with Elasticsearch, Kibana, Elastic Observability, and Elastic Security. Drop them into the agent runtime you already use, and your assistant stops using outdated patterns and starts getting it right.

What are skills?

Skills are self-contained packages that give AI agents the knowledge and tools to complete specific tasks in a repeatable way. Each skill lives in its own folder with a SKILL.md file containing metadata and instructions the agent follows.

For more background on the Agent Skills standard, see agentskills.io.

Scope

Skills in this repository focus on:

• Interacting with Elasticsearch APIs (search, indexing, cluster management)
• Building and managing Kibana content such as alerts, connectors, and more
• Patterns for Elastic Observability, Elastic Security, and Agent Builder

Available Skills

Cloud (2)

Skill	Description	Version	Author
cloud-onboarding	Onboard an Elastic Cloud organization: configure the elastic CLI's Cloud context and API key, establish a default region, then invite users, assign predefined or custom Serverless project roles, and create or revoke Cloud API keys. Use when setting up Cloud authentication or when granting, modifying, or auditing user access to an organization and its projects.	0.3.0	elastic
cloud-provisioning	Provision and operate Elastic Cloud infrastructure: create, connect to, update, and delete Serverless projects (Elasticsearch, Observability, Security); manage traffic filters (IP and AWS PrivateLink network security); and manage the lifecycle of Elastic Cloud Hosted deployments. Use when creating or performing day-2 operations on serverless projects or hosted deployments, or restricting their network access.	0.3.0	elastic

Elasticsearch (10)