notebooklm-create
Fail
Audited by Gen Agent Trust Hub on Sep 18, 2026
Risk Level: CRITICALEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill references external URLs that have been flagged as malicious by automated security scanners. Specifically, the site 'aifire.co' is cited for prompt attribution in 'references/prompt-library.md' and hardcoded in 'scripts/adapt_prompts.py'. The inclusion of these URLs in generated content could expose users to potentially harmful sites.
- [INDIRECT_PROMPT_INJECTION]: The skill exhibits a significant attack surface for indirect prompt injection due to its automated research workflow.
- Ingestion points: The skill ingests data from user-provided seed URLs and community forums like Reddit, Hacker News, and GitHub Discussions during the research phase using 'WebFetch' and 'WebSearch' tools.
- Boundary markers: There are no explicit instructions or delimiters used to isolate retrieved content or warn the agent to ignore embedded instructions within the processed data.
- Capability inventory: The skill uses the 'Agent' tool to process information and the 'mcp__notebooklm-rpc__' toolset to create notebooks and generate derivatives like audio overviews, quizzes, and mind maps.
- Sanitization: There is no evidence of filtering or validation of external content before it is incorporated into the notebook as a text source.
Recommendations
- AI detected serious security threats
- Contains 2 malicious URL(s) - DO NOT USE
Audit Metadata