Match the project to your task before installing it.
Security Review & Permission Governance · Public
csec-node-agent
New Relic Security Agent for Node.js
Check whether this project matches your task before installing it.
What it can doskill, recipe, host_instruction, eval, preflightReview the portable capability path.
Before continuingVerify in a sandboxDo not treat a preview pack as a proven local install.
GitHub snapshotstars unavailableforks unavailable · contributors unavailable
Doramagic.ai Last verification date: 2026-06-17 Verification method: source evidence, semantic profile, public page gate, and static build acceptance.
Publication status · 2026-06-17
What is csec-node-agent?
- New Relic Security Agent for Node.js
- Best fit: Users who want source-backed project understanding before installing it.
- Not for: Not for users who want to skip sandbox verification or cannot accept configuration, permission, or maintenance overhead.
- Capability added to an AI workflow: skill, recipe, host_instruction, eval, preflight
- First safe verification step: Verify the smallest path in an isolated environment and keep a rollback path.
- Verification state: source, Quick Start, and sandbox install checks are recorded as passed.
- Top risk: May increase setup, validation, or first-run risk for the user.
- Evidence base: https://github.com/newrelic/csec-node-agent, https://www.npmjs.com/package/@newrelic/security-agent, https://github.com/newrelic/csec-node-agent#readme, Human Manual
01
Quick decision
Use this section to decide whether the project is worth a deeper read.New Relic Security Agent for Node.js
stars unavailable · forks unavailable
02
What it can do
Translate the upstream project into concrete capabilities the user can judge before installing.page-1
The csec-node-agent (also referred to as the New Relic Node Security Agent) is a New Relic–maintained companion module that augments the standard newrelic APM agent with Interactive Applic...
Source: https://github.com/newrelic/csec-node-agent / Human Manual
page-2
The csec-node-agent is a New Relic security agent that performs both Interactive Application Security Testing (IAST) and Runtime Application Self-Protection (RASP) by instrumenting Node.js...
Source: https://github.com/newrelic/csec-node-agent / Human Manual
page-3
The New Relic Security Agent for Node.js (csec-node-agent) classifies runtime observations through a fixed vocabulary of event types, event categories, and vulnerability identifiers. These...
Source: https://github.com/newrelic/csec-node-agent / Human Manual
` ... `
The csec-node-agent is New Relic's Interactive Application Security Testing (IAST) and Runtime Application Self-Protection (RASP) module for Node.js, distributed as a companion to the newr...
Source: https://github.com/newrelic/csec-node-agent / Human Manual
Doramagic Pitfall Log
Source-linked risks stay visible on the manual page so the preview does not read like a recommendation.
Source: Doramagic discovery, validation, and Project Pack records
Sources: https://github.com/newrelic/csec-node-agent, Human Manual, Project Pack evidence, and downstream validation signals.
03
Community Discussion Evidence
Project-level external discussion stays visible on the detail page, not only inside the manual.Community Discussion Evidence
12 source-linked itemsReview these external discussions before using csec-node-agent with real data or production workflows. They are review inputs, not standalone proof that the project is production-ready.
-
01
Dependency Vulnerability: uuid
github / github_issue
-
02
[Repolinter] Open Source Policy Issues
github / github_issue
-
03
v3.0.4
github / github_release
-
04
v3.0.3
github / github_release
-
05
v3.0.2
github / github_release
-
06
v3.0.1
github / github_release
-
07
v3.0.0
github / github_release
-
08
v2.4.4
github / github_release
-
09
v2.4.3
github / github_release
-
10
v2.4.2
github / github_release
-
11
v2.4.1
github / github_release
-
12
v2.4.0
github / github_release
04
How to start
Only source-backed commands are shown here. Verify them in an isolated environment first.Try the prompt first
Test the workflow without installing the upstream project.
previewRead the Human Manual
Understand inputs, outputs, limits, and failure modes.
manualTake context to your AI host
Use the compiled assets in your preferred AI environment.
contextRun sandbox verification
Confirm install commands and rollback before using a primary environment.
verifynpm install @newrelic/security-agent@latestOfficial start command · https://github.com/newrelic/csec-node-agent#readme · verified: yes
05
Human Manual
The English page must expose the real manual, not a short placeholder.8+ sections · Human Manual
csec-node-agent Manual
The csec-node-agent (also referred to as the New Relic Node Security Agent) is a New Relic–maintained companion module that augments the standard newrelic APM agent with Interactive Applic...
Open the full manual- https://github.com/newrelic/csec-node-agent Project Manual
- Table of Contents
- page-1
- Overview
- Repository Architecture
- Instrumentation and Event Generation
- Dependencies and Community-Reported Concerns
- See Also
page-1
The csec-node-agent (also referred to as the New Relic Node Security Agent) is a New Relic–maintained companion module that augments the standard newrelic APM agent with Interactive Applic...
Source: https://github.com/newrelic/csec-node-agent / Human Manual
page-2
The csec-node-agent is a New Relic security agent that performs both Interactive Application Security Testing (IAST) and Runtime Application Self-Protection (RASP) by instrumenting Node.js...
Source: https://github.com/newrelic/csec-node-agent / Human Manual
page-3
The New Relic Security Agent for Node.js (csec-node-agent) classifies runtime observations through a fixed vocabulary of event types, event categories, and vulnerability identifiers. These...
Source: https://github.com/newrelic/csec-node-agent / Human Manual
` ... `
The csec-node-agent is New Relic's Interactive Application Security Testing (IAST) and Runtime Application Self-Protection (RASP) module for Node.js, distributed as a companion to the newr...
Source: https://github.com/newrelic/csec-node-agent / Human Manual
Doramagic Pitfall Log
Source-linked risks stay visible on the manual page so the preview does not read like a recommendation.
Source: Doramagic discovery, validation, and Project Pack records
06
AI Context Pack and portable assets
After deciding to continue, take the project context into your own AI host.Complete pack plus user-owned assets
These files are planning and verification assets for Claude Code, Codex, Gemini, Cursor, ChatGPT, and other AI hosts.
07
Preflight checks
Treat this page as a planning asset, not proof that your local environment is ready.- The manual is generated from source-linked project files and Doramagic validation signals.
- Community evidence warnings stay visible instead of being converted into marketing claims.
- This English page is indexable because the locale quality gate passed and explicit English index approval is enabled.
- Use the upstream repository as the final authority for installation commands, license, and version-specific behavior.
08
Pitfall Log and verification risks
Doramagic surfaces high-risk items before users treat a candidate capability as verified.Security or permission risk requires verification
May increase setup, validation, or first-run risk for the user.
Identity risk requires verification
May increase setup, validation, or first-run risk for the user.
Capability evidence risk requires verification
May increase setup, validation, or first-run risk for the user.
Maintenance risk requires verification
May increase setup, validation, or first-run risk for the user.
Security or permission risk requires verification
May increase setup, validation, or first-run risk for the user.
Security or permission risk requires verification
May increase setup, validation, or first-run risk for the user.
Security or permission risk requires verification
May increase setup, validation, or first-run risk for the user.
Maintenance risk requires verification
May increase setup, validation, or first-run risk for the user.