nano-banana-2

SUSPICIOUS. The core purpose and runtime behavior are coherent for an image-generation skill, and the inference.sh installer appears to be an official same-org distribution path with verification features. The main risk is transitive trust: the skill requires installing another skill (`belt-sh/cli`) and promotes further skill installs, expanding the agent's trust boundary beyond the stated single-model workflow.