nano-banana-image

Pass

Audited by Gen Agent Trust Hub on Oct 22, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill uses curl to send image generation and editing requests to the api.acedata.cloud endpoint.
  • [EXTERNAL_DOWNLOADS]: The skill provides instructions for installation using the npx skills command from the acedatacloud/skills repository. It also mentions an optional MCP server package mcp-nano-banana available via pip.
  • [INDIRECT_PROMPT_INJECTION]: The skill processes user-provided instructions (prompts) and image URLs to perform generation and editing tasks. Ingestion points: Prompts and image_urls in SKILL.md workflow definitions. Boundary markers: Absent. Capability inventory: Shell command execution (curl) for network API interaction. Sanitization: Absent.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 22, 2026, 07:32 PM