notebooklm
Pass
Audited by Gen Agent Trust Hub on Apr 29, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill automates the download and installation of Google Chrome and the Patchright library to enable browser-based interaction with NotebookLM.
- [COMMAND_EXECUTION]: Local scripts manage the creation of a Python virtual environment and the installation of necessary dependencies via subprocess calls during the setup process.
- [DATA_EXFILTRATION]: Browser session cookies and authentication metadata are stored locally in the skill's data directory for persistent access; these files are correctly excluded from version control.
- [PROMPT_INJECTION]: The skill ingests data from external web content (Google NotebookLM), which represents a standard indirect prompt injection surface for retrieval-based tools.
Audit Metadata