registry / @m4ykeldev/notebooklm-mcp / 0.3.1

@m4ykeldev/notebooklm-mcp@0.3.1

MCP server for Google NotebookLM — 32 tools for notebooks, sources, research, and studio content generation

Static Scan Results

scanned 2h ago · by rust-scanner

Static analysis flagged 9 finding(s) at 72.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason

One or more suspicious static signals were detected.

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessDynamicRequireEnvironmentVarsFilesystemNetworkShellWebSocket

Supply chain

HighEntropyStringsUrlStrings

ManifestNo manifest risk signals triggered.

scanned 1 file(s), 79.6 KB of source, external domains: notebooklm.google.com

Source & flagged code

2 flagged

dist/cli.jsView file

Lines 151-191javascript

151 "Briefing Doc": {

152 title: "Briefing Doc",

153 description: "A comprehensive briefing document",

154 prompt: "Create a briefing document"

155 },

156 "Study Guide": {

157 title: "Study Guide",

158 description: "A study guide for the material",

159 prompt: "Create a study guide"

160 },

161 "Blog Post": {

162 title: "Blog Post",

163 description: "A blog post about the material",

164 prompt: "Create a blog post"

165 },

166 "Create Your Own": {

167 title: "Create Your Own",

168 description: "Custom report format",

169 prompt: ""

170 }

171};

172var BASE_URL = "https://notebooklm.google.com";

173var BATCHEXECUTE_PATH = "/_/LabsTailwindUi/data/batchexecute";

174var QUERY_PATH = "/_/LabsTailwindUi/data/google.internal.labs.tailwind.orchestration.v1.LabsTailwindOrchestrationService/GenerateFreeFormStreamed";

175var DEFAULT_BL = "boq_labs-tailwind-frontend_20260419.02_p0";

176var REQUIRED_COOKIES = [

177 "SID",

178 "HSID",

179 "SSID",

180 "APISID",

181 "SAPISID"

182];

183var USER_AGENT = "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36";

184var DEFAULT_TIMEOUT = 3e4;

185var EXTENDED_TIMEOUT = 12e4;

186

187// src/auth.ts

188import { homedir } from "os";

189import { join } from "path";

190import { readFileSync, writeFileSync, mkdirSync, existsSync } from "fs";

191import { execSync } from "child_process";

High

Sandbox Evasion Gated Capability

Source gates dangerous network, credential, or execution behavior behind CI, host, platform, time, or geo fingerprint checks.

dist/cli.jsView on unpkg · L171

Lines 271-311javascript

271 if (fromEnv) return fromEnv;

272 const fromCache = loadTokensFromCache();

273 if (fromCache) return fromCache;

274 throw new Error(

275 "No authentication tokens found. Run `npx @m4ykeldev/notebooklm-mcp auth` to authenticate, or set NOTEBOOKLM_COOKIES environment variable."

276 );

277}

Source & flagged code

2 flagged · loading source

dist/cli.jsView file

171}; L172: var BASE_URL = "https://notebooklm.google.com"; L173: var BATCHEXECUTE_PATH = "/_[redacted]"; ... L190: import { readFileSync, writeFileSync, mkdirSync, existsSync } from "fs"; L191: import { execSync } from "child_process"; L192: import { createInterface } from "readline"; L193: var CONFIG_DIR = join(homedir(), ".notebooklm-mcp"); L194: var AUTH_FILE = join(CONFIG_DIR, "auth.json"); ... L231: try { L232: const data = JSON.parse(readFileSync(AUTH_FILE, "utf-8")); L233: if (data.cookies && validateCookies(data.cookies)) { ... L250: function loadTokensFromEnv() {

High

Sandbox Evasion Gated Capability

Source gates dangerous network, credential, or execution behavior behind CI, host, platform, time, or geo fingerprint checks.

dist/cli.jsView on unpkg · L171

291} L292: async function runFileImport(filePath) { L293: if (!filePath) {

Medium

Dynamic Require

Package source references dynamic require/import behavior.

dist/cli.jsView on unpkg · L291

Findings

1 High4 Medium4 Low

HighSandbox Evasion Gated Capabilitydist/cli.js

MediumDynamic Requiredist/cli.js

MediumNetwork

MediumEnvironment Vars

MediumStructural Risk Force Deep Review

LowScripts Present

LowFilesystem

LowHigh Entropy Strings

LowUrl Strings

Source & flagged code

2 flagged

dist/cli.jsView file

Lines 151-191javascript

151 "Briefing Doc": {

152 title: "Briefing Doc",

153 description: "A comprehensive briefing document",

154 prompt: "Create a briefing document"

155 },

156 "Study Guide": {

157 title: "Study Guide",

158 description: "A study guide for the material",

159 prompt: "Create a study guide"

160 },

161 "Blog Post": {

162 title: "Blog Post",

163 description: "A blog post about the material",

164 prompt: "Create a blog post"

165 },

166 "Create Your Own": {

167 title: "Create Your Own",

168 description: "Custom report format",

169 prompt: ""

170 }

171};

172var BASE_URL = "https://notebooklm.google.com";

173var BATCHEXECUTE_PATH = "/_/LabsTailwindUi/data/batchexecute";

174var QUERY_PATH = "/_/LabsTailwindUi/data/google.internal.labs.tailwind.orchestration.v1.LabsTailwindOrchestrationService/GenerateFreeFormStreamed";

175var DEFAULT_BL = "boq_labs-tailwind-frontend_20260419.02_p0";

176var REQUIRED_COOKIES = [

177 "SID",

178 "HSID",

179 "SSID",

180 "APISID",

181 "SAPISID"

182];

183var USER_AGENT = "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36";

184var DEFAULT_TIMEOUT = 3e4;

185var EXTENDED_TIMEOUT = 12e4;

186

187// src/auth.ts

188import { homedir } from "os";

189import { join } from "path";

190import { readFileSync, writeFileSync, mkdirSync, existsSync } from "fs";

191import { execSync } from "child_process";

High

Sandbox Evasion Gated Capability

Source gates dangerous network, credential, or execution behavior behind CI, host, platform, time, or geo fingerprint checks.

dist/cli.jsView on unpkg · L171

Lines 271-311javascript

271 if (fromEnv) return fromEnv;

272 const fromCache = loadTokensFromCache();

273 if (fromCache) return fromCache;

274 throw new Error(

275 "No authentication tokens found. Run `npx @m4ykeldev/notebooklm-mcp auth` to authenticate, or set NOTEBOOKLM_COOKIES environment variable."

276 );

277}