elastic/mcp-server-elasticsearch

AI review

The extension itself is a legitimate Elasticsearch MCP server with no hidden instructions or data exfiltration mechanisms. The only finding is a remote code execution risk in the contributing guide, which suggests running a curl-to-sh script for local development setup.

• low Remote code execution via curl-to-sh in contributing guide — docs/CONTRIBUTING.md:38 contains `curl -fsSL https://elastic.co/start-local | sh`, which downloads and executes a script from the internet. While this is a common convenience pattern for development tooling and the domain is legitimate (elastic.co), it violates the principle of not piping unverified scripts into a shell. This is a low risk because it's in a developer-facing contributing guide, not in the runtime configuration or tool descriptions, and the domain is controlled by the same organization.

Model: deepseek-chat

Static findings