muapi-nano-banana

Warn

Audited by Socket on Oct 1, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS: The skill's stated image-generation purpose is plausible, but its real execution path depends on an unverifiable local shell script and routes prompts/likely credentials to a third-party Muapi gateway while being branded in Google/Gemini terms. The main risk is trust and credential/data forwarding, not confirmed malware.

Confidence: 84%Severity: 76%
Audit Metadata
Analyzed At
Oct 1, 2026, 05:11 PM
Package URL
pkg:socket/skills-sh/samuraigpt%2Fmuapi-skills%2Fmuapi-nano-banana%2F@267b9f561d80c58137b83d7eb6a245c772958dc03fbea49ff92eba34519281d9