notebooklm

SUSPICIOUS. The skill’s capabilities fit its stated NotebookLM automation purpose, and the install path is largely verifiable through PyPI and the same GitHub repo. However, it depends on an unofficial third-party CLI that handles Google auth/session data, uses undocumented internal APIs, and performs a transitive skill installation step; these make the trust and secret-handling footprint broader than a low-risk guide skill.