notebooklm
Pass
Audited by Gen Agent Trust Hub on Apr 24, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill uses
subprocess.runinrun.py,setup_environment.py, andscripts/__init__.pyto automate the creation of a virtual environment, install necessary Python dependencies, and manage browser binaries. These operations are localized to the skill's own directory and are essential for its operation. - [EXTERNAL_DOWNLOADS]: The skill downloads the
patchrightlibrary and Google Chrome/Chromium binaries during setup. These are well-known, legitimate tools for browser automation used to interact with the NotebookLM service. - [DATA_EXPOSURE]: Authentication data (cookies and session state) is stored locally in a
data/directory. The skill includes explicit warnings in the documentation and uses.gitignoreto prevent this sensitive data from being shared or committed to version control.
Audit Metadata