newrelic-cli-skills
Pass
Audited by Gen Agent Trust Hub on Oct 13, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill ingests data from external New Relic telemetry sources which may contain attacker-controlled content such as error messages or log entries. This creates a surface for indirect prompt injection if the agent interprets these strings as instructions.
- Ingestion points: Results from
newrelic nrql queryinnrql/SKILL.mdandapm/SKILL.md. - Boundary markers: The instructions do not provide explicit delimiters or warnings for the agent to ignore instructions embedded in the telemetry data.
- Capability inventory: The skill uses the
newrelicCLI andjqfor data retrieval and processing. - Sanitization: While the skill includes NRQL input escaping in its helper scripts (referenced in
local.patch), it does not sanitize the output of queries for prompt injection patterns. - [COMMAND_EXECUTION]: The skill provides numerous examples of
newrelicCLI usage for querying and managing observability data. These are standard operational commands for the tool's intended purpose. - [EXTERNAL_DOWNLOADS]: The skill references downloading the
newrelicCLI from its official GitHub releases page, which is a well-known and trusted source for this utility.
Audit Metadata