notebooklm-cli

• Analyzed: May 12, 2026, 3:07 AM
• Findings: 1
• Version: 0.1.0
• Hash: a9274d60eee2e3d5fcd76bcac7ff48deb629c6abf1a7d22fe46e1b63c4b955c3
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill bundle describes a CLI tool (`nlm`) for Google NotebookLM. The primary reason for classification as 'suspicious' is the explicit instruction for the `nlm login` command to 'Launch Chrome, navigate to NotebookLM, and extract session cookies' as detailed in `SKILL.md` and `references/commands.md`. While this is presented as a legitimate authentication mechanism for the tool, the act of programmatically extracting session cookies is a high-risk capability that could be leveraged for credential theft if the underlying `nlm` tool were compromised or misused. There is no clear evidence of intentional harmful behavior or prompt injection against the agent beyond the stated purpose, but the sensitive nature of cookie extraction warrants a 'suspicious' classification.