nanobanana
Pass
Audited by Gen Agent Trust Hub on Oct 9, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill instructs the user to install the nanobanana CLI tool from the vendor's repository using
go install maragu.dev/nanobanana@latest. - [COMMAND_EXECUTION]: The utility
nanobananais executed via the command line to perform image generation and editing tasks as described inSKILL.md. - [INDIRECT_PROMPT_INJECTION]: The skill processes natural language prompts for image generation, which represents a surface for indirect prompt injection.
- Ingestion points: User-provided prompts within the image generation commands in
SKILL.md. - Boundary markers: None present.
- Capability inventory: Shell command execution and file system writes for output images.
- Sanitization: No sanitization or validation of the input prompts is described within the skill.
Audit Metadata