nano-banana-image
Pass
Audited by Gen Agent Trust Hub on Oct 22, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses
curlto send image generation and editing requests to theapi.acedata.cloudendpoint. - [EXTERNAL_DOWNLOADS]: The skill provides instructions for installation using the
npx skillscommand from theacedatacloud/skillsrepository. It also mentions an optional MCP server packagemcp-nano-bananaavailable viapip. - [INDIRECT_PROMPT_INJECTION]: The skill processes user-provided instructions (prompts) and image URLs to perform generation and editing tasks. Ingestion points: Prompts and
image_urlsinSKILL.mdworkflow definitions. Boundary markers: Absent. Capability inventory: Shell command execution (curl) for network API interaction. Sanitization: Absent.
Audit Metadata