evolink-nano-banana-2
Pass
Audited by Gen Agent Trust Hub on Mar 23, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill provides a helper script
scripts/evolink-image-gen.shwhich uses standard tools likecurlandjqto interact with the EvoLink API. This behavior is consistent with the skill's documented purpose. - [EXTERNAL_DOWNLOADS]: Documentation recommends the use of
npxto execute the@evolinkai/evolink-mediaMCP server. This is a standard method for utilizing vendor-provided toolkits and does not represent an unknown or malicious source. - [CREDENTIALS_UNSAFE]: The skill uses an environment variable
EVOLINK_API_KEYfor authentication. The documentation correctly guides users to set this variable securely, adhering to best practices for secret management.
Audit Metadata