create-image-nano-banana-fal

Pass

Audited by Gen Agent Trust Hub on Aug 19, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [COMMAND_EXECUTION]: The SKILL.md file contains a preflight section that executes pip3 install fal_client to ensure the required library is present. This is a standard installation procedure for the skill's functionality.
  • [EXTERNAL_DOWNLOADS]: The skill downloads generated images from fal.media URLs after the inference process is complete. This is the primary purpose of the skill and uses the official provider's infrastructure.
  • [CREDENTIALS_SAFE]: The skill uses load_fal_key() to retrieve credentials from environment variables (FAL_API_KEY or FAL_KEY). It correctly identifies missing keys during preflight without hardcoding any secrets.
  • [DATA_INGESTION]: The generate.py script reads local image files provided via arguments (--ref-image, --anchor) and uploads them to fal.ai's storage. This behavior is documented and necessary for the 'reference image' feature of the generative model.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 19, 2026, 04:38 PM
Security Audit — agent-trust-hub — create-image-nano-banana-fal