Security checks across malware telemetry and agentic risk
The skill largely matches its NotebookLM purpose, but needs review because it stores reusable Google session state, installs browser automation automatically, uses stealth-like browser settings, and has misleading download/help links.
Install only if you are comfortable with a local skill that installs Python packages and browser binaries, automates a logged-in Google session, stores reusable session cookies on disk, and may send your questions and notebook context to NotebookLM. Use a dedicated low-risk Google account, avoid the raw ZIP links unless independently verified, protect or delete browser_state/state.json when done, and do not use account rotation to bypass service limits.
pip_exe = venv_dir / "bin" / "pip"
print(" Installing dependencies in isolated environment...")
subprocess.run(
[str(pip_exe), "install", "-q", "-r", str(requirements_file)],
check=True
)else:
python_exe = venv_dir / "bin" / "python"
subprocess.run(
[str(python_exe), "-m", "patchright", "install", "chromium"],
check=True,
capture_output=True)
# Install requirements
result = subprocess.run(
[str(self.venv_pip), "install", "-r", str(self.requirements_file)],
check=True,
capture_output=True,# See: https://github.com/Kaliiiiiiiiii-Vinyzu/patchright-python#anti-detection
print("🌐 Installing Google Chrome for Patchright...")
try:
subprocess.run(
[str(self.venv_python), "-m", "patchright", "install", "chrome"],
check=True,
capture_output=True,66/66 vendors flagged this skill as clean.