Agent skill · elastic
kibana-agent-builder
Create and manage Kibana Agent Builder agents and custom tools. Use when asked to create, update, delete, test, or inspect agents or tools in Agent Builder, or when the user wants to understand what agents or tools already exist.
What it needs
About 6k tokens when loaded.
What this skill does
Kibana Agent Builder Create, inspect, update, delete, and test Agent Builder tools and agents. Ground LLM responses in Elasticsearch data through scoped search tools, parameterized ES QL, and workflow integrations. <!-- begin-partial: preamble --> Environment Configuration This skill executes Elasticsearch operations through the elastic CLI. If the elastic CLI is not installed, tell the user what it is needed for. Do not guess credentials, call the HTTP API directly, or attempt other workarounds. This skill references operations in HTTP-shorthand form (e.g., GET /, GET /cat/indices, GET /{index}/mapping, GET /{index}/settings/index.mode, POST /query). The Operations table at the end of this document maps each shorthand to the equivalent elastic CLI command — always use the CLI rather than calling the HTTP API directly. <!-- end-partial: preamble --> Resource model Agent Builder exposes three distinct resource kinds — do not conflate them: Kind Purpose Typical API ----------------------- -------------------------------------------------------------------------------------------------- -------------------------------------------- Tool Reusable function an agent invokes to retrieve or act on data (indexsearch, esql, workflow) POST kbn:/api/agentbuilder/tools Agent LLM entity with instructions and a curated toolset POST kbn:/api/agentbuilder/agents Chat / conversation Ephemeral messaging session with an existing agent POST kbn:/api/agentbuilder/converse/async Creating a tool does not create an agent. Listing or chatting with an agent does not create a tool. When the user asks to "create an agent" or "create a tool," identify which resource they mean before calling a write API. Built-in tools use the platform.core. prefix (for example platform.core.search). Custom tools and agents are user-defined. Read architecture-guide.md for built-in tool inventory, context engineering, and security notes. Process 1. Classify the task. …
How to use it
Reference it in AdaL, Claude Code, Cursor or any coding agent — nothing to install:
@skills elastic/kibana-agent-builder--5cab96