nano-banana-2
Pass
Audited by Gen Agent Trust Hub on Feb 27, 2026
Risk Level: SAFEREMOTE_CODE_EXECUTIONCOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [REMOTE_CODE_EXECUTION]: The skill includes a command to install the vendor's CLI tool using
curl -fsSL https://cli.inference.sh | sh. This is a remote code execution pattern where a script is fetched and piped directly to the shell. This pattern is used here as a standard installation method for the author's own software and targets the author's verified domain. - [COMMAND_EXECUTION]: The skill executes the
infshcommand-line tool to perform image generation and account management tasks. This includes commands such asinfsh loginandinfsh app run, which are necessary for the skill's primary functionality. - [EXTERNAL_DOWNLOADS]: The skill references external resources from
inference.sh,cli.inference.sh, anddist.inference.sh. These downloads are used to fetch the CLI binary and its associated configurations from the vendor's official distribution points.
Audit Metadata