sf-diagram-nanobananapro

SUSPICIOUS: the core image-generation purpose is coherent and the Python helper mainly uses official Google APIs, but the skill normalizes `--yolo` approval bypass and installs a mutable third-party Gemini extension from a separate GitHub org. Risk comes more from agent autonomy and extension trust than from confirmed exfiltration or malware.