notebooklm-hub

SUSPICIOUS. The skill’s purpose aligns with notebook querying, but its real footprint relies on an internal proxy and worker-managed session seeding rather than direct official NotebookLM access. No clear malware indicators or overt exfiltration endpoint appear, yet the combination of proxy-mediated data flow, centralized auth handling, unverifiable internal CLI provenance, and unpinned `npx` execution creates a medium security risk.