newrelic-cli-alerts
Pass
Audited by Gen Agent Trust Hub on Oct 13, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill instructions facilitate the ingestion of untrusted data from external New Relic API responses, which could potentially contain malicious instructions embedded by an attacker with access to the monitored environment.
- Ingestion points: In SKILL.md, the results from
newrelic nrql query(incidents) andnewrelic entity search(application metadata) are brought directly into the agent's context. - Boundary markers: The skill does not define specific delimiters or instructional guardrails to prevent the agent from following instructions that might be present within incident descriptions or entity names.
- Capability inventory: The skill provides the agent with write capabilities, including
newrelic alerts policy create,newrelic alerts conditions delete, andnewrelic alerts channel create, which could be abused if the agent is influenced by malicious data. - Sanitization: There is no evidence of data sanitization, filtering, or schema validation for the external content before it is interpolated into the agent's working memory.
Audit Metadata