nanobanana-ppt
Warn
Audited by Gen Agent Trust Hub on Jun 28, 2026
Risk Level: MEDIUMEXTERNAL_DOWNLOADSPROMPT_INJECTIONNO_CODE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill references an external repository (
https://github.com/op7418/NanoBanana-PPT-Skills) for its core functionality. It explicitly instructs users to "install the upstream bundle" containing scripts and assets from this untrusted source, which poses a supply chain risk. - [PROMPT_INJECTION]: The skill exhibits a surface for indirect prompt injection.
- Ingestion points: Performs "document analysis" to generate presentation content (SKILL.md).
- Boundary markers: No markers or explicit instructions to ignore embedded commands are present in the provided file.
- Capability inventory: While the skill itself contains no code, it is intended to trigger complex workflows (PPT generation, image generation) based on the processed data.
- Sanitization: There is no evidence of sanitization or filtering for the documents processed by the skill.
- [NO_CODE]: The current skill folder contains only a markdown file with metadata and instructions, lacking any local executable code or scripts.
Audit Metadata