Security audit
Security checks across malware telemetry and agentic risk
The skill is mostly coherent with its NotebookLM purpose, but it asks for sensitive Google session access and includes anti-detection automation, Z-Library downloading, and rate-limit workarounds that warrant Review before installation.
Install only if you are comfortable granting this skill access to authenticated Google NotebookLM sessions and local documents. Use a dedicated Google account, review the auth files under data/auth, avoid Z-Library workflows unless you have rights to the material, do not use account rotation to bypass limits, and treat generated downloads or folder sync deletes as real changes to your local and NotebookLM data.
package_json = skill_dir / "package.json"
if package_json.exists():
print(" Installing Node.js dependencies...")
subprocess.run(
["npm", "install"],
check=True,
capture_output=True,capture_output=True,
cwd=str(skill_dir)
)
subprocess.run(
["npm", "run", "install-browsers"],
check=True,
capture_output=True,print("📦 Installing Python dependencies...")
venv_python = get_venv_python()
try:
result = subprocess.run(
[str(venv_python), "-m", "pip", "install", "-r", str(requirements_file), "--quiet"],
capture_output=True,
text=True,if os.name == 'nt':
patchright_cmd = skill_dir / ".venv" / "Scripts" / "patchright.exe"
result = subprocess.run(
[str(patchright_cmd), "install", "chromium"],
capture_output=True,
text=True,# Pass remaining args to init_platform.py
init_args = sys.argv[2:]
cmd = [sys.executable, str(init_script)] + init_args
result = subprocess.run(cmd)
sys.exit(result.returncode)
# Handle --check-deps flag for pre-flight dependency check# Run the script
try:
result = subprocess.run(cmd)
sys.exit(result.returncode)
except KeyboardInterrupt:
print("\n⚠️ Interrupted by user")# Run setup with system Python
try:
result = subprocess.run(
[sys.executable, str(setup_script)],
timeout=TIMEOUT_VENV_SETUP
)print("📦 Installing agent-browser...")
npm_cmd = _get_npm_command()
try:
result = subprocess.run(
[npm_cmd, "install"],
cwd=str(skill_dir),
capture_output=True,)
# Install requirements
result = subprocess.run(
[str(self.venv_pip), "install", "-r", str(self.requirements_file)],
check=True,
capture_output=True,print("📦 Installing Node.js dependencies...")
npm_cmd = _get_npm_command()
try:
subprocess.run(
[npm_cmd, "install"],
check=True,
capture_output=True,print("✅ Node.js dependencies installed")
print("🌐 Installing Playwright browsers...")
try:
subprocess.run(
[npm_cmd, "run", "install-browsers"],
check=True,
capture_output=True,66/66 vendors flagged this skill as clean.
No suspicious patterns detected.