nano-banana-pro
Pass
Audited by Gen Agent Trust Hub on Jul 26, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONDATA_EXFILTRATION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill downloads and executes the
@pilio/clipackage from the npm registry usingpnpm dlxto provide image generation functionality. - Evidence: SKILL.md instructions include
pnpm dlx @pilio/cli nano-banana-pro. - [COMMAND_EXECUTION]: The agent is instructed to execute shell commands to interact with the vendor's API for generating images and monitoring task status.
- Evidence: SKILL.md includes commands for generation and
pnpm dlx @pilio/cli task wait <task_id>. - [DATA_EXFILTRATION]: Local image files provided via the
--inputflag are read by the CLI and sent to the vendor's API for processing as reference images. - Evidence: SKILL.md describes the use of
--input ./reference.pngfor image composition.
Audit Metadata