qalam-assist-write-ebook

CRITICAL E005: Suspicious download URL detected in skill instructions.

• Suspicious download URL detected (high risk: 1.00). This is a direct GitHub repository URL from an unverified third-party account being used as an installation source (via npx), which could deliver and run arbitrary code and is therefore suspicious until the repo and publisher are verified.

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.75). Outsider-authored free text can enter the LLM context via the runtime call to notebooklm ask ... --notebook <evidence-notebook-id> --json, where the evidence notebook’s cited_text/source full text is ingested and then used to draft content.