skills/maragudk/skills/nanobanana/Gen Agent Trust Hub

nanobanana

Pass

Audited by Gen Agent Trust Hub on Oct 9, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill instructs the user to install the nanobanana CLI tool from the vendor's repository using go install maragu.dev/nanobanana@latest.
  • [COMMAND_EXECUTION]: The utility nanobanana is executed via the command line to perform image generation and editing tasks as described in SKILL.md.
  • [INDIRECT_PROMPT_INJECTION]: The skill processes natural language prompts for image generation, which represents a surface for indirect prompt injection.
  • Ingestion points: User-provided prompts within the image generation commands in SKILL.md.
  • Boundary markers: None present.
  • Capability inventory: Shell command execution and file system writes for output images.
  • Sanitization: No sanitization or validation of the input prompts is described within the skill.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 9, 2026, 06:38 AM