nano-banana
Pass
Audited by Gen Agent Trust Hub on Aug 12, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes the
beltCLI tool via Bash to interface with Google Gemini image generation models. The execution environment is restricted to thebeltcommand only through theallowed-toolsconfiguration in the YAML frontmatter, which follows the principle of least privilege. - [EXTERNAL_DOWNLOADS]: The skill provides instructions for installing the
beltCLI from the vendor's official GitHub repository (inference-sh) and adding related functional skills vianpx skills add. These references target established platform resources and are documented as part of the standard setup process. - [INDIRECT_PROMPT_INJECTION]: The skill acts as a wrapper for image generation, ingesting user-provided prompts via JSON input in the
--inputflag. This is a standard functional requirement for image generation; the use of structured JSON for tool parameters reduces the risk of instruction confusion during processing.
Audit Metadata