The Agent Skills Directory

[EXTERNAL_DOWNLOADS]: The skill makes network requests to generativelanguage.googleapis.com to communicate with Google's Gemini image generation service.\n- [COMMAND_EXECUTION]: Utilizes standard macOS utilities including osascript for system notifications and open to display the resulting image files to the user.\n- [INDIRECT_PROMPT_INJECTION]: \n
Ingestion points: User-provided prompts are accepted as command-line arguments in scripts/generate.sh and interpolated into the generation request.\n
Boundary markers: None. The prompt is placed directly within a JSON string literal in the request body without delimiters or protective instructions.\n
Capability inventory: The skill can perform network operations via curl and write files to the ~/Pictures/nano-banana directory.\n
Sanitization: The script fails to escape double quotes or other special characters in the prompt variable before including it in the JSON payload, creating a risk of schema confusion or malformed API requests.

nano-banana