nano-banana-pro
Pass
Audited by Gen Agent Trust Hub on Sep 26, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to process untrusted user input and images, which is a necessary function for its primary purpose of image generation.
- Ingestion points: User-provided text is ingested via the
--promptargument, and existing images are ingested via the--referenceargument inscripts/image.py. - Boundary markers: Absent; user-provided text is concatenated with internal aspect ratio instructions before being transmitted to the model.
- Capability inventory: The skill performs network requests to Google's API and has the capability to write generated files to the local file system.
- Sanitization: No sanitization is performed on the prompt text or the content of reference images before they are processed by the generative model.
- [EXTERNAL_DOWNLOADS]: The skill utilizes well-known, official libraries from established organizations to facilitate its functionality.
- The
scripts/image.pyscript identifies dependencies ongoogle-genai(an official Google library) andpillowfor image handling, which are managed by theuvtool.
Audit Metadata