dt-setup-oneagent

This is an installation procedure for a legitimate remote monitoring agent, not apparent malware. It deliberately handles the API token through a temporary restricted file and documents cleanup and host-key risks. However, it executes an unverified, remotely downloaded script with sudo, and StrictHostKeyChecking=accept-new can permit first-connection interception. Use a trusted and validated environment URL, pin SSH host keys, and verify installer integrity where possible.