nano-banana
Pass
Audited by Gen Agent Trust Hub on Sep 2, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill references the installation of the
beltCLI and related functionality from external repositories, specifically pointing tonpx skills add belt-sh/cliand documentation hosted onraw.githubusercontent.com/inference-sh/. - [COMMAND_EXECUTION]: The skill uses the
Bashtool to executebeltcommands, which are scoped to thebeltbinary as defined in theallowed-toolsfrontmatter. These commands handle authentication (belt login) and interface with image generation models (belt app run). - [INDIRECT_PROMPT_INJECTION]: The skill provides a surface for processing user-defined prompts and external image URLs that are passed to the Gemini models.
- Ingestion points: User-provided text prompts and image URLs are accepted via the
--inputargument in variousbelt app runexamples inSKILL.md. - Boundary markers: No explicit delimiters or instructions are used to separate user input from model instructions within the skill's documentation.
- Capability inventory: The skill is authorized to execute
beltCLI commands via theBashtool to communicate with remote inference services. - Sanitization: Input prompts and image links are passed directly to the CLI tool without intermediate validation or sanitization within the skill's instructions.
Audit Metadata