new-relic

Pass

Audited by Gen Agent Trust Hub on Jul 9, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONREMOTE_CODE_EXECUTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill downloads the New Relic CLI installation script from New Relic's official domain (https://download.newrelic.com/install/newrelic-cli/scripts/install.sh). As this is a well-known service providing its own official installation method, this is considered a standard operational procedure.
  • [REMOTE_CODE_EXECUTION]: The skill executes a remote installation script via curl | bash during Task B. This is the official and documented method for installing the New Relic infrastructure agent on Linux systems.
  • [COMMAND_EXECUTION]: The skill uses sudo to run the New Relic installer with administrative privileges, which is required for installing system-level infrastructure monitoring agents.
  • [CREDENTIALS_UNSAFE]: The skill uses environment variable placeholders (e.g., ${NEW_RELIC_API_KEY}, process.env.NEW_RELIC_LICENSE_KEY) and explicitly recommends excluding sensitive headers from agent collection in the Best Practices section. This aligns with secure credential management practices.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 9, 2026, 10:24 AM
Security Audit — agent-trust-hub — new-relic