skills/mathews-tom/armory/notebooklm/Socket

notebooklm

Warn

Audited by Socket on Sep 17, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS: the skill is internally coherent for NotebookLM automation, but it relies on an unofficial third-party CLI from a personal publisher to obtain and use Google-authenticated session data. No clear exfiltration endpoint or overt malicious behavior is shown, yet the trust and credential exposure are higher than a normal official API integration.

Confidence: 88%Severity: 61%

Audit Metadata

Analyzed At

Sep 17, 2026, 09:10 AM

Package URL

pkg:socket/skills-sh/mathews-tom%2Farmory%2Fnotebooklm%2F@f86b514978bab07aa27f98fb855b191a5bfd5159dbaf34413fcc3391ffe1fa27