nanobanana-image-generation

Warn

Audited by Socket on Sep 21, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS. The core image/plot capabilities match the stated purpose and the official Google API flow is coherent, but the optional third-party Gemini-compatible endpoint introduces a meaningful data-flow risk because user prompts, input images, and API credentials can be sent to a non-official service. Disclosure and explicit opt-in keep this from malicious classification, but the proxy design is still disproportionate compared with direct official API use.

Confidence: 93%Severity: 56%
Audit Metadata
Analyzed At
Sep 21, 2026, 03:44 AM
Package URL
pkg:socket/skills-sh/grenzlinie%2Fmaterials-science-figure-skill%2Fnanobanana-image-generation%2F@2e0d64376acfda83d4f95fb02333c68e7a7d537f8cd15465ef0a3a5acb5ebfc6