nano-banana-2

SUSPICIOUS: the skill’s core purpose is coherent, but it relies on transitive skill installation and an external CLI/auth layer, which expands trust and credential exposure beyond a simple image-generation wrapper. The install sources appear plausibly official and documented, so this is not confirmed malware, but the supply-chain and transitive-install footprint make it medium risk.