cninfo-to-notebooklm
Pass
Audited by Gen Agent Trust Hub on May 2, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The script
scripts/upload.pyutilizessubprocess.runto interface with thenotebooklmcommand-line tool. This is a legitimate implementation used to create notebooks and manage uploads. The commands are executed using a list of arguments (shell=False), which is a recommended security practice to prevent shell injection vulnerabilities. - [EXTERNAL_DOWNLOADS]: The skill fetches financial reports from
cninfo.com.cn(巨潮资讯网), the official disclosure platform for Chinese listed companies. These downloads are restricted to PDF documents for data analysis purposes and do not involve the execution of remote scripts. - [SAFE]: The installation and setup process uses standard package managers (
pip) and well-known automation tools (playwright). The skill includes logic to clean up temporary files and directories after processing, ensuring no sensitive financial data is left on the local filesystem unnecessarily.
Audit Metadata