[External Plugin]: elasticsearch

[gregorycrist]

Plugin name

elasticsearch

Short description

Official Elastic plugin for GitHub Copilot — translate natural language to ES|QL queries, ingest data, manage Elasticsearch security (authn, authz, audit), and troubleshoot clusters. Powered by the official Elastic agent skills repository.

GitHub repository

elastic/agent-skills

Plugin path inside the repository

plugins/elasticsearch

Ref to review

No response

Commit SHA to review

e0d6b02194d4ec74cf9e5975290e950fc5ba549f

Version

0.3.0

License identifier

Apache-2.0

Author name

Elastic

Author URL

https://www.elastic.co

Homepage URL

https://github.com/elastic/agent-skills/tree/main/plugins/elasticsearch

Keywords

elasticsearch, esql, search, ingest, security, elastic

Additional notes for reviewers

This plugin is maintained by Elastic (https://www.elastic.co) and submitted by a member of the Elastic team.

The plugin bundles 7 skills:

• elasticsearch-esql — translate natural language to ES|QL, execute queries, discover indices and schemas
• elasticsearch-authn — authentication configuration and troubleshooting
• elasticsearch-authz — authorization and role management
• elasticsearch-audit — audit logging configuration
• elasticsearch-file-ingest — file-based data ingestion pipelines
• elasticsearch-onboarding — cluster setup and onboarding
• elasticsearch-security-troubleshooting — security diagnostics

The plugin.json at the submitted SHA has "name": "elasticsearch" matching the directory name and "skills": ["skills/"] as required by the intake validator.

Submission checklist

• The plugin lives in a public GitHub repository.
• The ref and/or sha I provided is immutable (release tag and/or full 40-character commit SHA), not a branch.
• This submission follows this repository's contribution, security, and responsible AI policies.
• This plugin is not already listed in the Awesome Copilot marketplace.

[github-actions]

⚠️ External plugin intake requires submitter fixes

This submission passed metadata validation, but quality gates found issues that must be fixed before it can move to maintainer review. Update the issue details or source plugin and then comment /rerun-intake.

• Plugin: elasticsearch
• Repository: https://github.com/elastic/agent-skills
• SHA: e0d6b02194d4ec74cf9e5975290e950fc5ba549f

Quality gate summary

Gate	Status
skill-validator	pass
install smoke test	fail

• skill-validator: pass
• install smoke test: fail
• overall: fail

skill-validator output

Validated 1 plugin(s)
Found 7 skill(s)
[elasticsearch-security-troubleshooting] 📊 elasticsearch-security-troubleshooting: 4,520 BPE tokens [chars/4: 5,519] (standard ~), 44 sections, 21 code blocks
[elasticsearch-security-troubleshooting]    ⚠  Skill is 4,520 BPE tokens (chars/4 estimate: 5,519) — approaching "comprehensive" range where gains diminish.
[elasticsearch-authz] 📊 elasticsearch-authz: 5,165 BPE tokens [chars/4: 5,335] (comprehensive ✗), 44 sections, 16 code blocks
[elasticsearch-authz]    ⚠  Skill is 5,165 BPE tokens (chars/4 estimate: 5,335) — "comprehensive" skills hurt performance by 2.9pp on average. Consider splitting into 2–3 focused skills.
[elasticsearch-file-ingest] 📊 elasticsearch-file-ingest: 2,574 BPE tokens [chars/4: 2,709] (standard ~), 52 sections, 26 code blocks
[elasticsearch-file-ingest]    ⚠  Skill is 2,574 BPE tokens (chars/4 estimate: 2,709) — approaching "comprehensive" range where gains diminish.
[elasticsearch-file-ingest]    ⚠  No numbered workflow steps — agents follow sequenced procedures more reliably.
[elasticsearch-esql] 📊 elasticsearch-esql: 4,936 BPE tokens [chars/4: 4,827] (standard ~), 17 sections, 22 code blocks
[elasticsearch-esql]    ⚠  Skill is 4,936 BPE tokens (chars/4 estimate: 4,827) — approaching "comprehensive" range where gains diminish.
[elasticsearch-authn] 📊 elasticsearch-authn: 3,526 BPE tokens [chars/4: 4,107] (standard ~), 30 sections, 15 code blocks
[elasticsearch-authn]    ⚠  Skill is 3,526 BPE tokens (chars/4 estimate: 4,107) — approaching "comprehensive" range where gains diminish.
[elasticsearch-authn]    ⚠  No numbered workflow steps — agents follow sequenced procedures more reliably.
[elasticsearch-onboarding] 📊 elasticsearch-onboarding: 571 BPE tokens [chars/4: 665] (detailed ✓), 3 sections, 0 code blocks
[elasticsearch-onboarding]    ⚠  No code blocks — agents perform better with concrete snippets and commands.
[elasticsearch-onboarding]    ⚠  No numbered workflow steps — agents follow sequenced procedures more reliably.
[elasticsearch-audit] 📊 elasticsearch-audit: 3,878 BPE tokens [chars/4: 4,160] (standard ~), 36 sections, 15 code blocks
[elasticsearch-audit]    ⚠  Skill is 3,878 BPE tokens (chars/4 estimate: 4,160) — approaching "comprehensive" range where gains diminish.
[elasticsearch-audit]    ⚠  No numbered workflow steps — agents follow sequenced procedures more reliably.
✅ All checks passed (7 skill(s), 0 agent(s), 1 plugin(s))

Install smoke test output

Plugin installed but expected files were missing at /tmp/external-plugin-quality-hwRGJO/copilot-home/.copilot/installed-plugins/external-plugin-intake/elasticsearch

### Canonical external.json payload ```json { "name": "elasticsearch", "description": "Official Elastic plugin for GitHub Copilot — translate natural language to ES|QL queries, ingest data, manage Elasticsearch security (authn, authz, audit), and troubleshoot clusters. Powered by the official Elastic agent skills repository.", "version": "0.3.0", "author": { "name": "Elastic", "url": "https://www.elastic.co" }, "repository": "https://github.com/elastic/agent-skills", "homepage": "https://github.com/elastic/agent-skills/tree/main/plugins/elasticsearch", "license": "Apache-2.0", "keywords": [ "elasticsearch", "esql", "search", "ingest", "security", "elastic" ], "source": { "source": "github", "repo": "elastic/agent-skills", "path": "plugins/elasticsearch", "sha": "e0d6b02194d4ec74cf9e5975290e950fc5ba549f" } } ```

[gregorycrist]

Hi — flagging what looks like an inconsistency in the intake tooling that's causing this failure.

The problem:

The external plugin intake validator (eng/external-plugin-validation.mjs) accepts a plugin.json at any of these paths relative to source.path:

plugin.json                  ← what we have
.github/plugin/plugin.json
.plugin/plugin.json

However, the install smoke test (eng/external-plugin-quality-gates.mjs, lines 232–234) hardcodes a single expected path:

const pluginManifestPath = path.join(installedPluginPath, ".github", "plugin", "plugin.json");
if (!fs.existsSync(installedPluginPath) || !fs.existsSync(pluginManifestPath)) {
  return { status: "fail", output: `Plugin installed but expected files were missing...` };
}

So a plugin with plugin.json at the root (which the validator accepts) will always fail the smoke test because the smoke test only checks for .github/plugin/plugin.json.

The two tools are inconsistent with each other. A plugin should only need to satisfy one of the three accepted paths — not be required to have .github/plugin/plugin.json specifically.

Current state of this submission:

• ✅ Skill-validator passes (found all 7 skills)
• ❌ Smoke test fails — because our manifest is at plugin.json (root), not .github/plugin/plugin.json

We can work around this by adding .github/plugin/plugin.json to the Elastic repo, but wanted to flag the underlying inconsistency first in case it's worth fixing on the tooling side — otherwise every external plugin that follows the plugin.json root convention will hit the same failure.

Happy to proceed with the workaround in the meantime if that's easier. Thanks!

[Surya-5555]

Hi, I'd like to fix this — I'll update eng/external-plugin-quality-gates.mjs to check all three valid paths instead of hardcoding .github/plugin/plugin.json. Will open a PR shortly!

[gregorycrist]

@Surya-5555 could you ping the reviewer, so this PR can be pushed??