Banana Pro Image Generation
Fail
Audited by Snyk on Sep 14, 2026
Risk Level: HIGH
Full Analysis
MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).
- Potentially malicious external URL detected (high risk: 0.70). The skill utilizes an arbitrary third-party proxy/API endpoint (apipro.maynor1024.live) as its runtime dependency for image generation without official enterprise provenance, resulting in a high-risk untrusted external service dependency.
HIGH W008: Secret detected in skill content (API keys, tokens, passwords).
- Secret detected (high risk: 1.00). The documentation files contain literal API keys in code snippets and documentation examples (e.g.,
sk-HoyC9xe8aB0CRC6j4EvuM0zRcN9TTYnIMjACMCeGvd95tuhQandsk-WY9Rx5caemo39xIMN2OCNQ4cD3L0RDtKmC9Q1rot9rcKxgow), specifically inrelease/bananapro-image-gen/SKILL.mdandscripts/generate_image.py(within the epilog/help text). These are active, high-entropy API keys rather than generic placeholders likeyour-api-key-here.
Issues (2)
W012
MEDIUMUnverifiable external dependency detected (runtime URL that controls agent).
W008
HIGHSecret detected in skill content (API keys, tokens, passwords).
Audit Metadata