nano-banana
Pass
Audited by Gen Agent Trust Hub on Mar 29, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses several internal Python scripts (
generate_ppt.py,edit_slide.py,serve_viewer.py,package_pptx.py) to manage the presentation lifecycle. These scripts perform standard file system operations and process execution within the local workspace.- [EXTERNAL_DOWNLOADS]: The skill relies on standard third-party libraries such asgoogle-genaifor model interaction,python-pptxfor document creation, andPillowfor image processing. These are common and reputable dependencies for this application type.- [PROMPT_INJECTION]: The workflow incorporates user feedback from a local review server into image generation prompts viaedit_slide.py. While this is an intended feature for iterative editing, it represents an indirect prompt injection surface where user-supplied text influences model behavior. - Ingestion points: User feedback is captured by
serve_viewer.pyand stored inslides_plan.json. - Boundary markers: Absent; feedback is passed directly as an instruction to the image generation model.
- Capability inventory: The skill can execute local scripts, write files via
write_file/edit_filetools, and perform network requests to the Gemini API. - Sanitization: No explicit sanitization or validation is applied to user feedback before it is interpolated into model prompts.
Audit Metadata