nano-banana-image-generator
Pass
Audited by Gen Agent Trust Hub on Mar 4, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSCREDENTIALS_UNSAFE
Full Analysis
- [COMMAND_EXECUTION]: The
generate_image.pyscript usessubprocess.runto execute the systemopencommand on the paths of generated images to provide a preview to the user upon completion. This is a standard utility function and is implemented using argument lists without a shell, minimizing injection risks. - [EXTERNAL_DOWNLOADS]: The skill's documentation instructs users to download high-resolution reference images from external sources such as Wikipedia, Wikimedia Commons, and institutional archives to improve the quality and likeness of AI-generated portraits.
- [CREDENTIALS_UNSAFE]: The skill relies on a
GEMINI_API_KEYfor its operations. The documentation provides shell commands to extract this key from a local.envfile, which is a common developer practice for managing local environment variables. - [DATA_INGESTION]: The skill processes external image files provided via the
--inputflag as references for image modification and cleanup, which is a core feature of the tool.
Audit Metadata