Skip to content

Update Agent Builder built-in skills reference for 9.5#7255

Draft
leemthompo wants to merge 6 commits into
mainfrom
update-agent-builder-builtin-skills
Draft

Update Agent Builder built-in skills reference for 9.5#7255
leemthompo wants to merge 6 commits into
mainfrom
update-agent-builder-builtin-skills

Conversation

@leemthompo

@leemthompo leemthompo commented Jul 7, 2026

Copy link
Copy Markdown
Member

Updates the Agent Builder built-in skills reference to match the current skill registry in Kibana (allow_lists.ts) for 9.5, using the code as the source of truth.

Changes

  • Adds the new 9.5 built-in skills across Platform, Streams and significant events, Security, Observability, and Elasticsearch.
  • Handles renames and consolidations cumulatively (no removed-version content deleted), with applies_to badges:
    • streams-explorationstreams-management
    • search.hybrid-search, search.semantic-search, and search.vector-databasesearch.vector-hybrid-search
  • Moves workflow-authoring to GA in 9.5, with a dropdown for the earlier 9.4 behavior.
  • Collapses each skill's assigned tools into a dropdown, and distinguishes built-in tools from skill-scoped inline tools.
  • Fixes a stale skill example link in skills.md.

Built and previewed locally with docs-builder (0 errors / 0 warnings).

Part of the Agent Builder 9.5 docs audit (elastic/docs-content-internal#1425). The built-in tools reference update is tracked separately in elastic/docs-content-internal#1431.

🤖 Generated with Claude Code

@github-actions

github-actions Bot commented Jul 7, 2026

Copy link
Copy Markdown
Contributor

Elastic Docs AI PR menu

Check the box to run an AI review for this pull request.

  • Review docs changes (docs-review). Status: not started.

Powered by GitHub Agentic Workflows and docs-actions. For more information, reach out to the docs team.

Aligns the built-in skills reference with the current skill registry
(allow_lists.ts) in Kibana:

- Add the 9.5 built-in skills across Platform, Streams and significant
  events, Security, Observability, and Elasticsearch
- Handle renames and consolidations cumulatively with applies_to badges
  (streams-exploration to streams-management; hybrid-search,
  semantic-search, and vector-database consolidated into
  search.vector-hybrid-search)
- Move workflow-authoring to GA in 9.5 with an inline preview 9.4 note
- Collapse each skill's assigned tools into a dropdown to reduce noise
- Fix a stale skill example link in skills.md

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
@github-actions

github-actions Bot commented Jul 7, 2026

Copy link
Copy Markdown
Contributor

@leemthompo leemthompo force-pushed the update-agent-builder-builtin-skills branch from bb88694 to e2e4e28 Compare July 7, 2026 09:21
@github-actions

github-actions Bot commented Jul 7, 2026

Copy link
Copy Markdown
Contributor

Elastic Docs Style Checker (Vale)

Summary: 2 warnings found

⚠️ Warnings (2): Fix when the suggestion improves clarity or correctness.
File Line Rule Message
explore-analyze/ai-features/agent-builder/builtin-skills-reference.md 385 Elastic.Spelling 'chatbots' is a possible misspelling.
explore-analyze/ai-features/agent-builder/builtin-skills-reference.md 385 Elastic.Spelling 'chatbot' is a possible misspelling.

The Vale linter checks documentation changes against the Elastic Docs style guide. To use Vale locally or report issues, refer to Elastic style guide for Vale.

Point the preview Security skills at their specific Security Solution
experimental feature flags and settings, distinct from the Agent Builder
agentBuilder:experimentalFeatures advanced setting.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
@leemthompo

Copy link
Copy Markdown
Member Author

@leemthompo check #7172

- Fix cases-management tool IDs to platform.core.cases.* (were platform.cases.*)
- Mark rule-management action-policy tool and dashboard-management dashboard
  tool as skill-scoped inline tools, not built-in registry tools

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
- Control is agentBuilder:tracing:enabled (on by default), not the
  experimental features flag (per kibana #276174)
- Note dashboard-building capability and that it's part of the default agent

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
Brand-new capabilities ship as technical preview, so tag skills that
debut in 9.5 as preview 9.5 / serverless preview: discover-data-analysis,
cases-management, rule-management, significant-events-management,
significant-events-onboarding, knowledge-indicators-management,
ki-identification-management, streams-gap-detection, skill-authoring,
observability.service-map, siem-readiness, and search.elasticsearch-tutorial.

Left as ga 9.5+: streams-management and search.vector-hybrid-search
(successors of skills marked ga 9.4, removed 9.5 — flagging preview here
would misrepresent a GA capability as a downgrade), and workflow-authoring
and automatic_troubleshooting (which already existed as preview in 9.4).

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
@leemthompo

leemthompo commented Jul 8, 2026

Copy link
Copy Markdown
Member Author

👋 This PR updates the built-in skills reference for 9.5. If you added one of the new skills below, could you sanity-check its entry — description, assigned tools (built-in vs skill-scoped inline), and availability/gating?

Thanks!

@janmonschke

Copy link
Copy Markdown

@leemthompo lgtm (cases)


:::

{applies_to}`stack: ga 9.5+` From 9.5, the skill can also list watchlists to discover watchlist names and members, using the `security.list_watchlists` tool.

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

this skill also now also have access to set_asset_criticality tool
elastic/kibana#275477

Copy link
Copy Markdown
Member Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

thanks @tcalopes!

@stratoula stratoula left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Discover skill LGTM

Per kibana #275477, entity-analytics can now also set entity asset
criticality via the built-in security.set_asset_criticality tool.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
Comment on lines +177 to +185
### Agent and skill authoring

$$$agent-builder-skill-authoring-skill$$$ `skill-authoring` {applies_to}`stack: preview 9.5` {applies_to}`serverless: preview`
: Authors a new {{agent-builder}} skill from a chat description. Use when a user asks to create, build, generate, or design a skill, capability, or expertise area for an agent.

:::{dropdown} Assigned tools
Internal tools to list available tools and to propose or patch a skill definition.

:::

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

@leemthompo has 9.5 been cut for release? i think the skill_authoring_skill is now called skill_management_skill https://github.com/elastic/kibana/pull/271463/changes#diff-c0bcb0f583598be2dbf7d273ffc206d7eb932385e7ce3e5945354a37686e2ea1 based on this change

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

5 participants