nano-banana
Pass
Audited by Gen Agent Trust Hub on Sep 2, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill provides instructions for installing the
beltCLI tool from a public GitHub repository (inference-sh/skills). This is a documented installation method for the service the skill is designed to interface with. - [COMMAND_EXECUTION]: The skill uses the
beltcommand to interact with the inference.sh API. This is the intended purpose of the skill and all commands provided are examples of legitimate use (e.g.,belt login,belt app run). - [INDIRECT_PROMPT_INJECTION]: The skill has an ingestion surface as it processes user-provided text prompts for image generation. However, since the output is an image generation request to an external API, the risk of traditional prompt injection affecting the local agent is negligible.
Audit Metadata