nano-banana

The skill is purpose-aligned and not overtly deceptive, but it carries high security risk because it depends on an external `infsh` CLI installed via remote script and then forwards authentication and user image/prompt data through that CLI/platform. The intermediary routing is disclosed, so this is better classified as suspicious/high-risk rather than confirmed malware.