Browse reusable Agent Skills, each with a clear purpose and practical guidance.
Encrypted Saved Objects (ESO) in Kibana — registration, AAD attribute choices, partial update safety, model version migrations with createModelVersion, canEncrypt checks, and Serverless constraints. Use when creating, modifying, or working with ESO types.
Security Solution Entity Store architecture and implementation guide. Use when working with Security Entity Store code, entity analytics, entity resolution, golden entity, alias entity, resolved_to, resolution fields, entity maintainers, EUID, entity CRUD API, or related features in the Security Solution. Also use when someone asks "how does entity store work", "entity store v2", "entity maintainer", or mentions the entity_store plugin under x-pack/solutions/security/plugins/entity_store/. NOTE: This is the Security Solution Entity Store, not Observability's entity model.
Migrate Enzyme tests to React Testing Library (RTL). Use when converting shallow/mount enzyme tests to RTL render, replacing enzyme selectors with RTL queries, updating snapshot tests, or when the user mentions enzyme migration, RTL migration, or react-testing-library.
Scaffold a new LLM evaluation suite package with Playwright config, evaluate fixture, and package files. Use when creating a new eval suite, adding an evals package for a plugin, or setting up the boilerplate for offline LLM evaluations.
Fix API documentation issues in a Kibana plugin or package. Use when asked to fix, improve, or add JSDoc/API documentation for a Kibana plugin or package, or when check_package_docs validation fails.
Security Solution specific. Analyzes flaky, failing, or skipped Security Solution Cypress tests to determine root cause and recommend fixes. Use when: (1) a user shares a flaky or skipped Cypress test, (2) asked to fix a test that intermittently fails, (3) asked to unskip a test, (4) triaging a test stability GitHub issue, (5) asked "why is this test flaky/failing", (6) asked to analyze test failures in ESS/Serverless/MKI environments, (7) asked whether to fix, delete, or migrate a broken Cypress test.
Fetch a GitHub issue by number or URL and reformat it according to the Kibana bug report or feature request template. Classifies the issue type automatically, then rewrites the body and updates it via the GitHub CLI.
Guide for building keyword/full-text search with Elasticsearch. Use when a developer wants text matching, filters, faceted search, autocomplete, or traditional search functionality.
Shared utilities for interacting with a local Kibana instance. Provides auto-detection of Kibana URL and auth, and a kibana_curl wrapper.
Implement and review Kibana feature privilege deprecations. Use when deprecating features, renaming features, splitting features, consolidating features, moving privilege capabilities, reviewing deprecation PRs, or working with the replacedBy mapping system.