kibana-anomaly-detection

Elastic ML Anomaly Detection Single skill covering all anomaly detection work against Kibana Agent Builder MCP at {KIBANA_URL}/api/agent_builder/mcp . Use the Mode Selector below to pick the right approach for the user's question — modes share the same tool surface and concepts. Platform Read path: ES|QL against .ml-anomalies- , .ml-config , .ml-notifications- , .ml-annotations-* Always-available: platform.core.execute_esql (plus additional platform tools for search, index mapping, and documentation — see scripts/agent_builder_constants.json ) ML API spec (if available): .kibana_ai_openapi_spec_elasticsearch — see references/anomaly-detection-openapi-spec-discover.md for discovery pattern. Run ad_validate_ml_tool_permissions first when tools return empty/misleading results — missing privileges are the most common cause of false negatives. Full permissions matrix: references/permissions-matrix.md . Mode Selector Show more Installs 565 Repository elastic/agent-skills GitHub Stars 513 First Seen May 28, 2026 Security Audits Gen Agent Trust Hub Pass Socket Pass Snyk Warn