nano-banana

Warn

Audited by Socket on Sep 25, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS. The skill’s main capability matches its stated purpose, and the extension source appears tied to the Gemini ecosystem, so this is not fundamentally incompatible with image generation. However, the unpinned GitHub-based extension install and the instruction to always use --yolo create meaningful trust and autonomy risk that are disproportionate to a routine image skill.

Confidence: 86%Severity: 57%
Audit Metadata
Analyzed At
Sep 25, 2026, 08:03 AM
Package URL
pkg:socket/skills-sh/nicepkg%2Fai-workflow%2Fnano-banana%2F@4232310711793b755666edf9bafb82d16b7ce6b73e4e3d0bd0388051ecf09081
Security Audit — socket — nano-banana