nano-banana-poster

Pass

Audited by Gen Agent Trust Hub on Jul 25, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill uses an .env file for API key management as per standard security practices, avoiding hardcoded credentials.
  • [SAFE]: Remote operations are restricted to Google's official GenAI API and Gemini services. Files uploaded as assets for image generation are explicitly deleted from the server after processing (cleaned up in the main function).
  • [SAFE]: Command-line arguments for the poster generation script are parsed and validated against a whitelist of supported aspect ratios and file types.
  • [SAFE]: Dependencies listed in package.json are standard libraries (@google/genai, dotenv, mime, ts-node) at modern versions.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 25, 2026, 07:08 PM
Security Audit — agent-trust-hub — nano-banana-poster