Use when invoking the elastic CLI via elastic_cli or choosing CLI vs MCP/native Kibana tools. Covers shorthands, serverless gotchas, command names, and docs/ESQL flags.
91
87%
Does it follow best practices?
Impact
97%
2.48xAverage score across 3 eval scenarios
Passed
No known issues
Serverless cluster diagnostics
No cluster health on serverless
100%
100%
Correct serverless connectivity check
30%
100%
No `es indices list`
100%
100%
Correct index listing command
20%
100%
No `es cluster health-report`
100%
100%
SLO space-id flag
0%
100%
No ILM on serverless
62%
100%
elastic_cli tool not bash
0%
90%
argv as JSON array
10%
100%
JSON output flag
16%
100%
Kibana agent builder inventory
Correct agents command
0%
100%
Correct tools command
0%
100%
JSON flag on both commands
0%
100%
elastic_cli not bash
50%
100%
argv JSON arrays
100%
100%
kb naming pattern explained
8%
100%
Help-flag discovery method
80%
100%
No output-fields flag
100%
100%
kb/es shorthands acknowledged
80%
100%
Docs search and ES|QL query flags
docs search uses --query flag
0%
100%
docs read uses --path flag
0%
100%
docs read uses elastic.co/docs/ URL
50%
100%
esql query uses --query flag
21%
100%
esql query includes --json
0%
100%
elastic_cli not bash
30%
100%
argv as JSON arrays
100%
100%
MCP tool preferred for ES|QL
33%
41%
No output-fields or output-template
100%
100%
2e200ec
Table of Contents
If you maintain this skill, you can claim it as your own. Once claimed, you can manage eval scenarios, bundle related skills, attach documentation or rules, and ensure cross-agent compatibility.