elastic/mcp-server-elasticsearch

AI review

The extension itself is a legitimate Elasticsearch MCP server with no hidden instructions or data exfiltration mechanisms. The only finding is a documentation file that suggests running a curl-piped-to-shell command for local development, which is a common but mildly risky practice that could be exploited if the URL were compromised.

• low Remote code execution suggestion in contributing docs — docs/CONTRIBUTING.md:38 contains `curl -fsSL https://elastic.co/start-local | sh`, which pipes a remote script directly into a shell. While this is a common convenience pattern for Elastic's official start-local script, it violates security best practices and could be exploited if the URL or DNS is compromised. This is not part of the MCP server's runtime behavior, only a development setup suggestion.

Model: deepseek-chat

Static findings