registry / @m4ykeldev/notebooklm-mcp / 0.3.0

@m4ykeldev/notebooklm-mcp@0.3.0

MCP server for Google NotebookLM — 32 tools for notebooks, sources, research, and studio content generation

Static Scan Results

scanned 6h ago · by rust-scanner

Static analysis flagged 9 finding(s) at 72.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason

One or more suspicious static signals were detected.

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessDynamicRequireEnvironmentVarsFilesystemNetworkShellWebSocket

Supply chain

HighEntropyStringsUrlStrings

ManifestNo manifest risk signals triggered.

scanned 1 file(s), 85.8 KB of source, external domains: notebooklm.google.com

Source & flagged code

2 flagged

dist/cli.jsView file

Lines 168-208javascript

168 "Briefing Doc": {

169 title: "Briefing Doc",

170 description: "A comprehensive briefing document",

171 prompt: "Create a briefing document"

172 },

173 "Study Guide": {

174 title: "Study Guide",

175 description: "A study guide for the material",

176 prompt: "Create a study guide"

177 },

178 "Blog Post": {

179 title: "Blog Post",

180 description: "A blog post about the material",

181 prompt: "Create a blog post"

182 },

183 "Create Your Own": {

184 title: "Create Your Own",

185 description: "Custom report format",

186 prompt: ""

187 }

188};

189var BASE_URL = "https://notebooklm.google.com";

190var BATCHEXECUTE_PATH = "/_/LabsTailwindUi/data/batchexecute";

191var QUERY_PATH = "/_/LabsTailwindUi/data/google.internal.labs.tailwind.orchestration.v1.LabsTailwindOrchestrationService/GenerateFreeFormStreamed";

192var DEFAULT_BL = "boq_labs-tailwind-frontend_20260419.02_p0";

193var REQUIRED_COOKIES = [

194 "SID",

195 "HSID",

196 "SSID",

197 "APISID",

198 "SAPISID"

199];

200var USER_AGENT = "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36";

201var DEFAULT_TIMEOUT = 3e4;

202var EXTENDED_TIMEOUT = 12e4;

203

204// src/auth.ts

205import { homedir } from "os";

206import { join } from "path";

207import { readFileSync, writeFileSync, mkdirSync, existsSync } from "fs";

208import { execSync } from "child_process";

High

Sandbox Evasion Gated Capability

Source gates dangerous network, credential, or execution behavior behind CI, host, platform, time, or geo fingerprint checks.

dist/cli.jsView on unpkg · L188

Lines 288-328javascript

288 if (fromEnv) return fromEnv;

289 const fromCache = loadTokensFromCache();

290 if (fromCache) return fromCache;

291 throw new Error(

292 "No authentication tokens found. Run `npx @m4ykeldev/notebooklm-mcp auth` to authenticate, or set NOTEBOOKLM_COOKIES environment variable."

293 );

294}

Source & flagged code

2 flagged · loading source

dist/cli.jsView file

188}; L189: var BASE_URL = "https://notebooklm.google.com"; L190: var BATCHEXECUTE_PATH = "/_[redacted]"; ... L207: import { readFileSync, writeFileSync, mkdirSync, existsSync } from "fs"; L208: import { execSync } from "child_process"; L209: import { createInterface } from "readline"; L210: var CONFIG_DIR = join(homedir(), ".notebooklm-mcp"); L211: var AUTH_FILE = join(CONFIG_DIR, "auth.json"); ... L248: try { L249: const data = JSON.parse(readFileSync(AUTH_FILE, "utf-8")); L250: if (data.cookies && validateCookies(data.cookies)) { ... L267: function loadTokensFromEnv() {

High

Sandbox Evasion Gated Capability

Source gates dangerous network, credential, or execution behavior behind CI, host, platform, time, or geo fingerprint checks.

dist/cli.jsView on unpkg · L188

308} L309: async function runFileImport(filePath) { L310: if (!filePath) {

Medium

Dynamic Require

Package source references dynamic require/import behavior.

dist/cli.jsView on unpkg · L308

Findings

1 High4 Medium4 Low

HighSandbox Evasion Gated Capabilitydist/cli.js

MediumDynamic Requiredist/cli.js

MediumNetwork

MediumEnvironment Vars

MediumStructural Risk Force Deep Review

LowScripts Present

LowFilesystem

LowHigh Entropy Strings

LowUrl Strings

Source & flagged code

2 flagged

dist/cli.jsView file

Lines 168-208javascript

168 "Briefing Doc": {

169 title: "Briefing Doc",

170 description: "A comprehensive briefing document",

171 prompt: "Create a briefing document"

172 },

173 "Study Guide": {

174 title: "Study Guide",

175 description: "A study guide for the material",

176 prompt: "Create a study guide"

177 },

178 "Blog Post": {

179 title: "Blog Post",

180 description: "A blog post about the material",

181 prompt: "Create a blog post"

182 },

183 "Create Your Own": {

184 title: "Create Your Own",

185 description: "Custom report format",

186 prompt: ""

187 }

188};

189var BASE_URL = "https://notebooklm.google.com";

190var BATCHEXECUTE_PATH = "/_/LabsTailwindUi/data/batchexecute";

191var QUERY_PATH = "/_/LabsTailwindUi/data/google.internal.labs.tailwind.orchestration.v1.LabsTailwindOrchestrationService/GenerateFreeFormStreamed";

192var DEFAULT_BL = "boq_labs-tailwind-frontend_20260419.02_p0";

193var REQUIRED_COOKIES = [

194 "SID",

195 "HSID",

196 "SSID",

197 "APISID",

198 "SAPISID"

199];

200var USER_AGENT = "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36";

201var DEFAULT_TIMEOUT = 3e4;

202var EXTENDED_TIMEOUT = 12e4;

203

204// src/auth.ts

205import { homedir } from "os";

206import { join } from "path";

207import { readFileSync, writeFileSync, mkdirSync, existsSync } from "fs";

208import { execSync } from "child_process";

High

Sandbox Evasion Gated Capability

Source gates dangerous network, credential, or execution behavior behind CI, host, platform, time, or geo fingerprint checks.

dist/cli.jsView on unpkg · L188

Lines 288-328javascript

288 if (fromEnv) return fromEnv;

289 const fromCache = loadTokensFromCache();

290 if (fromCache) return fromCache;

291 throw new Error(

292 "No authentication tokens found. Run `npx @m4ykeldev/notebooklm-mcp auth` to authenticate, or set NOTEBOOKLM_COOKIES environment variable."

293 );

294}