nano-banana-poster
Pass
Audited by Gen Agent Trust Hub on Jul 25, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill uses an
.envfile for API key management as per standard security practices, avoiding hardcoded credentials. - [SAFE]: Remote operations are restricted to Google's official GenAI API and Gemini services. Files uploaded as assets for image generation are explicitly deleted from the server after processing (cleaned up in the
mainfunction). - [SAFE]: Command-line arguments for the poster generation script are parsed and validated against a whitelist of supported aspect ratios and file types.
- [SAFE]: Dependencies listed in
package.jsonare standard libraries (@google/genai,dotenv,mime,ts-node) at modern versions.
Audit Metadata