skills/janszewczyk/claude-plugins/notebooklm/Socket

notebooklm

Warn

Audited by Socket on Jun 19, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS. The skill is purpose-aligned and uses standard package installation channels, but it relies on an unofficial personal-maintained client that handles Google authentication/session material and uses undocumented APIs. This is not confirmed malware, yet the trust and credential-routing model is materially riskier than an official NotebookLM integration.

Confidence: 85%Severity: 58%

Audit Metadata

Analyzed At

Jun 19, 2026, 03:51 PM

Package URL

pkg:socket/skills-sh/JanSzewczyk%2Fclaude-plugins%2Fnotebooklm%2F@cf68c6417f6e951fcf89a5c707d8cc5d8a6788bdc2af7666cab1744395fd2fc3