skills/inference-shell/skills/nano-banana/Socket

nano-banana

Warn

Audited by Socket on Apr 22, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS: the skill’s purpose is coherent, but its footprint is broader than necessary. Main concerns are official-but-risky remote CLI installation, credential/content forwarding through inference.sh instead of direct Google APIs, wildcard CLI permissions, and transitive skill installation instructions. This looks more like a high-trust platform wrapper than a narrowly scoped Gemini image skill.

Confidence: 85%Severity: 61%

Audit Metadata

Analyzed At

Apr 22, 2026, 04:25 PM

Package URL

pkg:socket/skills-sh/inference-shell%2Fskills%2Fnano-banana%2F@b7cd930517819a81e71297290e37abd7be0763dc