new-relic

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 1.00). The skill includes a literal API key-like value passed inline on the command line (NEW_RELIC_API_KEY="NRAK-XXXXXXXXX"), which requires the LLM to reproduce or handle a secret value verbatim in generated commands.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 1.00). The skill runs a remote install script at runtime via "curl -Ls https://download.newrelic.com/install/newrelic-cli/scripts/install.sh | bash", which fetches and immediately executes remote code and is required for the infrastructure-agent setup.

MEDIUM W013: Attempt to modify system services in skill instructions.

• Attempt to modify system services in skill instructions detected (high risk: 1.00). The skill explicitly instructs running a remote install script and a sudo installation of the New Relic infrastructure agent and provides an /etc/newrelic-infra.yml config (modifying system files), which requires elevated privileges and changes the host state.