notebooklm-research

SUSPICIOUS: the skill is broadly aligned with research automation, but it relies on an unofficial third-party client that receives a persistent Google session cookie, processes large amounts of untrusted external content, and supports autonomous sharing/posting. The main concern is trust and credential forwarding to non-Google tooling, not confirmed malware.

No direct evidence of classic malware (backdoor, credential theft, obfuscated payloads, eval/exec, or exfiltration) was found in this fragment. However, there is a meaningful supply-chain risk: it can execute an external CLI and notably runs a fallback via 'npx trend-pulse ...', which may download and execute npm packages at runtime. Additionally, user-supplied URLs are passed to NotebookLM for source ingestion without visible validation. Recommend removing or pinning the npx fallback, enforcing URL allowlists/scheme checks, and reviewing NotebookLM artifact download/write behavior.