nanobanana-skill

Pass

Audited by Gen Agent Trust Hub on Mar 31, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSNO_CODE
Full Analysis
  • [COMMAND_EXECUTION]: The skill documents how to run a local Python script named nanobanana.py with various arguments to generate images.
  • [EXTERNAL_DOWNLOADS]: The instructions include a pip install command for standard, well-known libraries: google-genai, Pillow, and python-dotenv.
  • [NO_CODE]: The skill contains only the SKILL.md instruction file. The actual Python code (nanobanana.py) described in the documentation is not provided in the skill package.
  • [SAFE]: The skill follows security best practices by advising the user to store their Gemini API key in environment variables or a local .env file rather than hardcoding it.
Audit Metadata
Risk Level
SAFE
Analyzed
Mar 31, 2026, 02:03 AM
Security Audit — agent-trust-hub — nanobanana-skill