notebooklm

Fail

Audited by Socket on Mar 7, 2026

1 alert found:

Obfuscated File
Obfuscated FileHIGH
SKILL.md

The NotebookLM CLI wrapper appears to be a coherent tool matching its stated purpose: it provides a Python-based wrapper around NotebookLM operations with support for long-running tasks via background delegation. The footprint is generally proportional to its purpose, relying on the notebooklm-py backend and local environment. However, there are moderately elevated security considerations around: (1) long-running background task delegation that could execute operations without immediate user oversight; (2) potential credential/token handling and storage without explicit security measures in the provided description; and (3) reliance on external NotebookLM service endpoints whose security posture depends on the notebooklm-py implementation. Overall, the risk is suspicious but not malicious; treat as HIGHER-MR risk (suspicious) due to data flow and delegation patterns, and monitor credential handling and background task reporting more closely.

Confidence: 98%
Audit Metadata
Analyzed At
Mar 7, 2026, 03:21 PM
Package URL
pkg:socket/skills-sh/tiangong-ai%2Fskills%2Fnotebooklm%2F@6dd100a4370d07c3cf558bdfda5e94ac269c0a88