nano-banana
Warn
Audited by Snyk on Oct 22, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (low risk: 0.10). The required workflow fetches and reads the advanced API reference from a public GitHub repository.
MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).
- Direct money access detected (medium risk: 0.30). The skill provides image generation and editing tools (
nanobanana_generate_image,nanobanana_edit_image) operated via an Ace Data Cloud account using Ace Credits, representing a direct financial operation (paid service usage). Independent service authentication/authorization is established via the configured Ace Data Cloud API Token option.
Issues (2)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
W009
MEDIUMDirect money access capability detected (payment gateways, crypto, banking).
Audit Metadata