nano-banana-2
Pass
Audited by Gen Agent Trust Hub on Apr 4, 2026
Risk Level: SAFEREMOTE_CODE_EXECUTIONCOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [REMOTE_CODE_EXECUTION]: The skill provides an installation command that fetches a shell script from the vendor's domain (
cli.inference.sh) and pipes it to the shell. This is used to install theinfshCLI tool necessary for the skill's functionality. - [EXTERNAL_DOWNLOADS]: The installation script downloads binary files from
dist.inference.sh. The skill also references documentation and examples hosted oninference.sh. - [COMMAND_EXECUTION]: The skill relies on executing
infshcommands viaBashto perform tasks such as image generation, model selection, and user authentication. This usage is explicitly allowed and scoped in the skill's configuration.
Audit Metadata