notebooklm-mcp
Warn
Audited by Socket on Oct 15, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS: the skill is internally aligned with its stated purpose, but that purpose itself depends on an unofficial third-party client authenticating with Google session cookies. The main risk is credential scope and forwarding to third-party code, plus broad config changes for MCP wiring; documentation guardrails reduce but do not remove that risk.
Confidence: 85%Severity: 68%
Audit Metadata