skills/aradotso/devtools-skills/notebooklm-mcp-cli/Socket

notebooklm-mcp-cli

Warn

Audited by Socket on Jun 13, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS. The skill is broadly coherent with its stated NotebookLM automation purpose and uses standard package-manager distribution, but its footprint is elevated by unofficial API use, browser cookie extraction, persistent MCP config changes, and transitive skill installation. This looks more like a high-risk unofficial integration than confirmed malware.

Confidence: 100%Severity: 60%

Audit Metadata

Analyzed At

Jun 13, 2026, 10:06 AM

Package URL

pkg:socket/skills-sh/Aradotso%2Fdevtools-skills%2Fnotebooklm-mcp-cli%2F@99e376b0e45548c17938d1fb1bd0ce4503ad1deda27efeaa96453df493dfb7a8