nano-banana

CRITICAL E004: Prompt injection detected in skill instructions.

• Potential prompt injection detected (medium risk: 0.30). The skill is a plain image-generation wrapper, but its install banner points to a different publisher namespace (belt-sh/cli) than the inference-sh skills it links to, and the install instructions come from a raw GitHub script URL. That is an unexplained, possibly lookalike source, though nothing shows malicious intent.