nanobanana
Pass
Audited by Gen Agent Trust Hub on Mar 26, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill executes a local script (
scripts/generate.py) via theuv runcommand to process image generation requests. This script uses the official Google GenAI SDK and handles input/output locally.- [EXTERNAL_DOWNLOADS]: The skill specifies a dependency on thegoogle-genailibrary. This is an official package from a well-known technology provider (Google) used for its intended purpose.- [SAFE]: The skill implements proactive environment checks that safely handle API keys by truncating their output for verification and provides clear setup instructions for manual user configuration. It also gathering project context (like color schemes from CSS files) to improve output quality, which is performed locally using standard search tools.
Audit Metadata