generate-nanobanana
Pass
Audited by Gen Agent Trust Hub on Oct 24, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to process external style definitions (
style.md) from user-provided reference sets, creating a surface for indirect prompt injection. - Ingestion points: Reference set directories containing
style.mdfiles (e.g.,generations/refs/brand/style.md). - Boundary markers: The instructions explicitly direct the agent to treat these files as untrusted style data and ensure they do not override user instructions or access private files.
- Capability inventory: The skill performs file system writes to the
generations/directory and initiates network requests to Google's API. - Sanitization: The agent is instructed to manually review style data before inclusion in the generation prompt.
- [EXTERNAL_DOWNLOADS]: The skill documentation references the installation of the official
google-genaiPython package and communicates with Google's Generative AI infrastructure. - Details: Fetches content from Google's official API at
generativelanguage.googleapis.comand references documentation atai.google.dev. - [COMMAND_EXECUTION]: The reference files contain example shell commands (
curl) and Python scripts for interacting with the Gemini API. - Details: These examples involve reading environment variables for API keys and writing binary image/video data to the local filesystem within the
generations/folder.
Audit Metadata