cc-notebooklm
Pass
Audited by Gen Agent Trust Hub on Jun 14, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill provides instructions to install the
notebooklm-mcp-clipackage via standard package managers (uvorpip). This is a legitimate tool used to interface with Google's NotebookLM service via MCP. - [COMMAND_EXECUTION]: The skill uses local CLI commands (
nlm login,nlm setup,nlm doctor) to handle authentication and verify the environment. These are standard operational commands for the package being installed. - [DATA_EXPOSURE & EXFILTRATION]: The skill modifies the
~/.claude/settings.jsonfile. This is the official configuration file for Claude Code, and writing the MCP server details to it is the documented method for adding capabilities to the agent.
Audit Metadata