nanobanana-mcp-image-generation

Warn

Audited by Socket on May 18, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: The skill’s purpose and capabilities are coherent for Gemini-based image generation, but trust is weakened because the skill publisher is not the same as the third-party MCP server it tells users to run, and it forwards Gemini/Vertex credentials to that external server. This is not confirmed malware, but it is a medium-high security risk due to third-party executable trust and mutable installation.

Confidence: 89%Severity: 64%
Audit Metadata
Analyzed At
May 18, 2026, 04:40 PM
Package URL
pkg:socket/skills-sh/Aradotso%2Fmcp-skills%2Fnanobanana-mcp-image-generation%2F@82952f860bd5f8a80d039378f92ea7c8c3a90536
Security Audit — socket — nanobanana-mcp-image-generation