nano-banana-image
Pass
Audited by Gen Agent Trust Hub on Apr 8, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill's installation instructions provide commands to download a pre-built binary from the author's GitHub repository (Leechael/nano-banana-image-skill) or to clone the source code for building locally. These operations are standard for a tool-based skill.
- [COMMAND_EXECUTION]: The skill operates by executing the
nano-bananabinary through the shell, passing user-defined prompts and configuration flags as arguments. - [CREDENTIALS_UNSAFE]: The skill utilizes a
GEMINI_API_KEY. The documentation correctly advises users on secure management practices, recommending the use of environment variables or the 1Password CLI to inject the key at runtime rather than hardcoding it.
Audit Metadata