notebooklm

CRITICAL E005: Suspicious download URL detected in skill instructions.

• Suspicious download URL detected (high risk: 0.70). Not an obvious malicious download (uses Google NotebookLM and a GitHub repo), but the GitHub repo is an unverified third‑party source that instructs cloning and running Python scripts which install dependencies, create virtual environments, launch browsers and manage authentication—actions that can execute arbitrary code or exfiltrate credentials—so it presents a moderate risk.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 1.00). The skill's install directs users to git clone and then run the repository's run.py (git clone https://github.com/PleasePrompto/notebooklm-skill), which fetches remote code that is executed locally as the required skill runtime—thus the external GitHub URL supplies and controls code the agent runs.