notebooklm-cli

Command-line interface to manage Google NotebookLM notebooks, sources, and generate audio, quizzes, reports, presentations, and visual study materials progra...

This skill is instruction-only and documents a CLI ('nlm') that authenticates by launching Chrome and extracting session cookies and that can read/import Google Drive content. Before installing or enabling it: (1) demand provenance—where does the 'nlm' binary come from (official release, GitHub repository, checksums/signature)? (2) do not let it access your real browser profile; cookie extraction can expose all Google sessions. Prefer an OAuth-based flow or an official API token rather than cookie scraping. (3) If you must test it, run in an isolated environment (throwaway VM/container) with a disposable Google account and no sensitive Drive data. (4) Ask the publisher for source code, a clear installer, and an explanation why cookie extraction is necessary and how data is stored/transmitted. (5) Do not enable autonomous use of this skill until you verify its behavior and provenance.

Type: OpenClaw Skill Name: notebooklm-cli Version: 0.1.0 The skill bundle describes a CLI tool (`nlm`) for Google NotebookLM. The primary reason for classification as 'suspicious' is the explicit instruction for the `nlm login` command to 'Launch Chrome, navigate to NotebookLM, and extract session cookies' as detailed in `SKILL.md` and `references/commands.md`. While this is presented as a legitimate authentication mechanism for the tool, the act of programmatically extracting session cookies is a high-risk capability that could be leveraged for credential theft if the underlying `nlm` tool were compromised or misused. There is no clear evidence of intentional harmful behavior or prompt injection against the agent beyond the stated purpose, but the sensitive nature of cookie extraction warrants a 'suspicious' classification.