soia-pkm-transform-article-notebooklm

CRITICAL E005: Suspicious download URL detected in skill instructions.

• Suspicious download URL detected (high risk: 0.80). These URLs point to third‑party GitHub repositories (a non‑official NotebookLM CLI and an Open Design repo) that the skill recommends cloning/installing; unvetted repos/CLI installers can distribute malicious code so they should be treated as suspicious until verified.

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.75). NotebookLM provider workflow uploads the user-supplied article/URL content as the NotebookLM “source” (outsider-authored free text if the URL/vault path isn’t authored by the operating user), which NotebookLM then reads to generate artifacts—this is an indirect prompt-injection surface via the source text.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The Open Design bootstrap instructs a runtime git clone of https://github.com/nexu-io/open-design.git and subsequent pnpm install / run steps that fetch and execute remote code, so this URL is a runtime external dependency that can execute remote code.