gemini-nano-banana

CRITICAL E005: Suspicious download URL detected in skill instructions.

• Suspicious download URL detected (high risk: 0.75). While none of the links point to direct .exe/.msi binaries, the set includes an unfamiliar domain (deepnlp.org), a GitHub repo and third‑party npm/pip packages to install — all from sources of unclear reputation — which makes them a suspicious distribution vector for malicious code if the packages or site are untrusted or compromised.

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.80). This skill accepts arbitrary public URLs for images (see SKILL.md examples like generate_image_nano_banana_with_reference and ocr_extract_text_from_image which pass image URLs such as "https://..."), and those externally-hosted, user-provided resources are fetched and interpreted (OCR/reference images) as part of the tool workflow, so untrusted third-party content could influence behavior.