skills/mathruffian-dot/opencode-lazy-packs/opencode-notebooklm/Socket

opencode-notebooklm

Warn

Audited by Socket on Jun 13, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS: the skill is functionally coherent for connecting OpenCode to NotebookLM, but it depends on a non-Google third-party CLI that handles Google login and uses undocumented internal APIs. This is not confirmed malware, yet the trust and account-access implications are higher than a normal documentation-only skill.

Confidence: 100%Severity: 60%

Audit Metadata

Analyzed At

Jun 13, 2026, 02:02 PM

Package URL

pkg:socket/skills-sh/mathruffian-dot%2Fopencode-lazy-packs%2Fopencode-notebooklm%2F@73a32a34f2115291063e7b59a0ea06cca3b0c55bd39f477473e7a7c67ef19b59