gemini-nano-banana

Fail

Audited by Socket on Mar 10, 2026

1 alert found:

Obfuscated File
Obfuscated FileHIGH
SKILL.md

Overall, the gemini-nano-banana skill appears to function as an integration/driver layer to OneKey Router Gemini image-generation tools. The footprint is largely coherent with a reading/dialing tool that requires an API key and returns image-related outputs. The primary issues are documentation and naming inconsistencies (generate_image_nano_banana) which create misalignment between claimed purpose and actual behavior. No unverifiable binaries, no obvious credential exfiltration, and no suspicious network patterns are evident from the provided description. Treat the misalignment as a usability risk (high impact on correct usage) but not an immediate security risk. Recommend clarifying tool names, ensuring consistent parameter/return schemas, and adding explicit scoping to prevent misuse or misinterpretation in automated pipelines.

Confidence: 98%
Audit Metadata
Analyzed At
Mar 10, 2026, 08:46 AM
Package URL
pkg:socket/skills-sh/aiagenta2z%2Fonekey-agent-router%2Fgemini-nano-banana%2F@24ffad6e5a62f513b5eb90c5d953e81380528f9d
Security Audit — socket — gemini-nano-banana