nano-banana
Pass
Audited by Gen Agent Trust Hub on Sep 8, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION] The skill is configured to execute the
beltcommand-line utility to interface with the inference.sh image generation apps. - [EXTERNAL_DOWNLOADS] References documentation and installation scripts hosted on the vendor's official GitHub repository and domain.
- [INDIRECT_PROMPT_INJECTION] The skill ingests user-provided text prompts for image processing, which serves as a vulnerability surface for indirect prompt injection attacks.
Audit Metadata