gemini-nano-banana
Audited by Socket on Mar 10, 2026
1 alert found:
Obfuscated FileOverall, the gemini-nano-banana skill appears to function as an integration/driver layer to OneKey Router Gemini image-generation tools. The footprint is largely coherent with a reading/dialing tool that requires an API key and returns image-related outputs. The primary issues are documentation and naming inconsistencies (generate_image_nano_banana) which create misalignment between claimed purpose and actual behavior. No unverifiable binaries, no obvious credential exfiltration, and no suspicious network patterns are evident from the provided description. Treat the misalignment as a usability risk (high impact on correct usage) but not an immediate security risk. Recommend clarifying tool names, ensuring consistent parameter/return schemas, and adding explicit scoping to prevent misuse or misinterpretation in automated pipelines.