nano-banana-2
Pass
Audited by Gen Agent Trust Hub on Sep 19, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill references installation commands for the 'belt' CLI and provides a link to installation instructions hosted on the author's official GitHub repository.
- Evidence:
npx skills add belt-sh/cli(Skill installation)https://raw.githubusercontent.com/inference-sh/skills/refs/heads/main/cli-install.md(Installation documentation)- [COMMAND_EXECUTION]: The skill relies on the
beltcommand-line utility to interact with the generation API. The execution scope is restricted to this specific tool in the skill's frontmatter configuration. - Evidence:
allowed-tools: Bash(belt *)(Tool restriction)belt app run google/gemini-3-1-flash-image(Operational command)
Audit Metadata