Back to skill
Skillv0.1.1

VirusTotal security

NotebookLM CLI · External malware reputation and Code Insight signals for this exact artifact hash.

Scanner verdict

BenignMay 1, 2026, 3:08 AM
Hash
d180d4d9844a6e04c47b5f2c399ca56b26f596ef1d3d1654a064da5fe039312a
Source
palm
Verdict
benign
Code Insight
Type: OpenClaw Skill Name: tiangong-notebooklm-cli Version: 0.1.1 The skill bundle acts as a thin wrapper for the `notebooklm` CLI tool. The `scripts/notebooklm.mjs` file uses `node:child_process.spawnSync` to execute the `notebooklm` command, passing all arguments directly. This is a legitimate and common pattern for CLI wrappers, and arguments are passed as an array, mitigating shell injection vulnerabilities within the wrapper itself. The `SKILL.md` and `references/cli-commands.md` files provide clear, functional instructions for using the wrapper without any evidence of prompt injection attempts or instructions for malicious behavior. There is no indication of data exfiltration, persistence mechanisms, or other malicious intent.
External report
View on VirusTotal