nano-banana-image-to-image
Pass
Audited by Gen Agent Trust Hub on Aug 12, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The script
scripts/imagegen.pyis a CLI tool designed to be executed by the agent to perform image generation tasks. It performs file system operations such as reading reference images for upload and writing generated images to a designated download directory (~/Downloads/AiHive by default). - [CREDENTIALS_SAFE]: The skill implements secure API key management. It allows providing the key via environment variables (
AI_HIVE_API_KEY), CLI arguments, or a local configuration file (~/.ai-hive/config.json). The script explicitly applies secure file permissions (0600) to the configuration file to prevent unauthorized local access. - [EXTERNAL_DOWNLOADS]: The script uses the
requestslibrary to download generated media from the AI Hive service. These downloads are a core part of the skill's functionality to provide results to the user. - [DATA_EXFILTRATION]: The skill communicates with
ai-hive.iclip.cnto upload reference images and submit generation prompts. This behavior is consistent with the skill's stated purpose of providing an interface to the AI Hive OpenAPI service.
Audit Metadata