nano-banana-2

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). [SKILL.md describes a CLI workflow where the agent ingests user-supplied --input fields like prompt (and optional images URLs) to generate images; this is outsider-authored free text delivered directly to the runtime as the model prompt.]