notebooklm-researcher

SUSPICIOUS: the skill’s research purpose broadly matches its capabilities, but it relies on a non-Google third-party CLI/MCP package that uses undocumented NotebookLM APIs and browser cookie extraction for auth. That makes the install/auth trust model weaker than the claimed production-grade positioning, and the skill also processes untrusted external content with enough agent capability to raise medium security risk.