registry / @m4ykeldev/notebooklm-mcp / 0.3.1

@m4ykeldev/notebooklm-mcp@0.3.1

MCP server for Google NotebookLM — 32 tools for notebooks, sources, research, and studio content generation

Static Scan Results

scanned 2h ago · by rust-scanner

Static analysis flagged 9 finding(s) at 72.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason

One or more suspicious static signals were detected.

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessDynamicRequireEnvironmentVarsFilesystemNetworkShellWebSocket

Supply chain

HighEntropyStringsUrlStrings

ManifestNo manifest risk signals triggered.

scanned 1 file(s), 79.6 KB of source, external domains: notebooklm.google.com

Source & flagged code

2 flagged

dist/cli.jsView file

Lines 151-191javascript

151 "Briefing Doc": {

152 title: "Briefing Doc",

153 description: "A comprehensive briefing document",

154 prompt: "Create a briefing document"

155 },

156 "Study Guide": {

157 title: "Study Guide",

158

Source & flagged code

2 flagged · loading source

dist/cli.jsView file

171}; L172: var BASE_URL = "https://notebooklm.google.com"; L173: var BATCHEXECUTE_PATH = "/_[redacted]"; ... L190: import { readFileSync, writeFileSync, mkdirSync, existsSync } from "fs"; L191: import { execSync } from "child_process"; L192: import { createInterface } from "readline"; L193: var CONFIG_DIR = join(homedir(), ".notebooklm-mcp"); L194: var AUTH_FILE = join(CONFIG_DIR, "auth.json"); ... L231: try { L232: const data = JSON.parse(readFileSync(AUTH_FILE, "utf-8")); L233: if (data.cookies && validateCookies(data.cookies)) { ... L250: function loadTokensFromEnv() {

High

Sandbox Evasion Gated Capability

Source gates dangerous network, credential, or execution behavior behind CI, host, platform, time, or geo fingerprint checks.

dist/cli.jsView on unpkg · L171

291} L292: async function runFileImport(filePath) { L293: if (!filePath) {

Medium

Dynamic Require

Package source references dynamic require/import behavior.

dist/cli.jsView on unpkg · L291

Findings

1 High4 Medium4 Low

HighSandbox Evasion Gated Capabilitydist/cli.js

MediumDynamic Requiredist/cli.js

MediumNetwork

MediumEnvironment Vars

MediumStructural Risk Force Deep Review

LowScripts Present

LowFilesystem

LowHigh Entropy Strings

LowUrl Strings

Lines 271-311javascript

271 if (fromEnv) return fromEnv;

272 const fromCache = loadTokensFromCache();

273 if (fromCache) return fromCache;

274 throw new Error(

275 "No authentication tokens found. Run `npx @m4ykeldev/notebooklm-mcp auth` to authenticate, or set NOTEBOOKLM_COOKIES environment variable."

276 );

277}

278function parseCookieString(raw) {

279 const cookies = {};

280 for (const line of raw.split("\n")) {

281 const trimmed = line.trim();

282 if (!trimmed || trimmed.startsWith("#")) continue;

283 for (const part of trimmed.split(";")) {

284 const eq = part.indexOf("=");

285 if (eq > 0) {

286 cookies[part.slice(0, eq).trim()] = part.slice(eq + 1).trim();

287 }

288 }

289 }

290 return cookies;

291}

292async function runFileImport(filePath) {

293 if (!filePath) {

Medium

Dynamic Require

Package source references dynamic require/import behavior.

dist/cli.jsView on unpkg · L291

294 console.log(`

295To authenticate via file:

2961. Open Chrome and navigate to https://notebooklm.google.com

2972. Open DevTools (F12) > Network tab

2983. Type "batchexecute" in the filter

2994. Click on any batchexecute request

3005. Find "cookie:" in Request Headers

3016. Copy the full cookie VALUE (not the header name)

3027. Save to a file and provide the path

303`);

304 throw new Error("Provide a cookie file path with --file <path>");

305 }

306 const raw = readFileSync(filePath, "utf-8");

307 const cookies = parseCookieString(raw);

308 if (!validateCookies(cookies)) {

309 throw new Error(

310 `Missing required cookies. Need: ${REQUIRED_COOKIES.join(", ")}`

311 );