nano-banana-2
Pass
Audited by Gen Agent Trust Hub on Jul 15, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill communicates with
ai-factory.frevana.comto send image generation requests. This is the primary function of the skill and targets the vendor's own API infrastructure. - [COMMAND_EXECUTION]: The script utilizes standard system tools including
bashfor orchestration,curlfor network communication, andpython3for secure JSON payload construction and response validation. - [PROMPT_INJECTION]: The skill processes user-supplied text for image generation, which constitutes an indirect prompt injection surface.
- Ingestion points: User input is captured via the
--promptor--contentsarguments inSKILL.md. - Boundary markers: No explicit delimiters are used in the instructions to the agent to separate user input from the command context.
- Capability inventory: The skill possesses network access (
curl), script execution capabilities (bash,python3), and file system write access (via the--outputflag andmkdir). - Sanitization: The implementation uses
json.dumpswithin a Python helper script to ensure the user prompt is correctly escaped and safely formatted into the JSON API payload, preventing structural or command injection.
Audit Metadata