notebooklm
Pass
Audited by Gen Agent Trust Hub on Oct 29, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes
subprocess.runin several scripts (run.py,setup_environment.py, and__init__.py) to manage its execution environment. This includes creating a Python virtual environment, upgrading pip, and installing necessary dependencies and browser binaries. - [COMMAND_EXECUTION]: A central wrapper script (
run.py) usessubprocess.runto invoke the skill's internal logic scripts (e.g.,ask_question.py,auth_manager.py) while ensuring they run within the correct virtual environment context. - [INDIRECT_PROMPT_INJECTION]: The skill's primary function is to retrieve and process text from external Google NotebookLM notebooks. This introduces a potential attack surface where malicious instructions embedded in a user's notebook could influence the agent's behavior. The skill provides instructions for the agent to analyze the retrieved information for completeness but does not implement explicit sanitization of the synthesized responses.
Audit Metadata