nano-banana-videogen

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 1.00). The skill requires installing/running the nano-banana CLI via "npx @the-focus-ai/nano-banana" (SKILL.md), which causes npx to fetch and execute remote package code at runtime and is a required dependency for the skill.