notebooklm-studio
Warn
Audited by Snyk on May 17, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (high risk: 0.90). The skill explicitly ingests and uses untrusted public web content (web URLs, YouTube links, public pages) as sources — see SKILL.md, README, and references/source-ingestion.md — and the agent is required to read and act on that content via the notebooklm CLI to drive artifact generation and follow-up actions, so third-party content can materially influence tool behavior.
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata