nano-banana-image-generator

SUSPICIOUS: the skill's purpose and actions mostly align with image generation on Ricebowl, but it requires trusting an external `ai-media` CLI whose ownership/provenance is not clearly tied to Ricebowl and whose package path can download platform binaries. The main concern is supply-chain and credential-forwarding risk, not confirmed malware or overt exfiltration.