nano-banana

Warn

Audited by Socket on Sep 23, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS. The skill’s main capability matches its stated purpose, and the extension source appears tied to the Gemini ecosystem, so this is not fundamentally incompatible with image generation. However, the unpinned GitHub-based extension install and the instruction to always use --yolo create meaningful trust and autonomy risk that are disproportionate to a routine image skill.

Confidence: 86%Severity: 57%
Audit Metadata
Analyzed At
Sep 23, 2026, 06:08 AM
Package URL
pkg:socket/skills-sh/kkoppenhaver%2Fcc-skills%2Fnano-banana%2F@3cee7fe063fa5aa4cd7ad5bd790fe4e60136f18794b5453d5c70a3b36a26321d