notebooklm
Warn
Audited by Socket on Oct 7, 2026
1 alert found:
SecuritySecurityscripts/nlm-generate.sh
MEDIUMSecurityMEDIUM
scripts/nlm-generate.sh
This is a CLI wrapper for NotebookLM artifact generation. It contains a command-injection vulnerability because user-supplied notebook IDs and report formats are interpolated into a string passed to eval. Avoid eval and pass arguments directly to the CLI. The counter increments also cause premature termination under set -e. The fragment does not show independent malicious behavior or data theft.
Confidence: 99%Severity: 78%
Audit Metadata