nano-banana
Pass
Audited by Gen Agent Trust Hub on Feb 27, 2026
Risk Level: SAFEREMOTE_CODE_EXECUTIONEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [REMOTE_CODE_EXECUTION]: The skill downloads and executes an installation script from
https://cli.inference.shusing a shell pipe. This is the vendor's official distribution method for theinfshCLI tool and is considered safe as it originates from the skill author's infrastructure. - [EXTERNAL_DOWNLOADS]: Fetches necessary binaries and configuration from
dist.inference.shandcloud.inference.sh. It also references the installation of related skills vianpxfrom theinference-shorganization. - [COMMAND_EXECUTION]: Utilizes the
infshCLI to run AI applications and manage authentication viainfsh login. - [PROMPT_INJECTION]: The skill presents an indirect prompt injection surface. Ingestion points: The
imagesparameter accepts external URLs inSKILL.md. Boundary markers: No explicit delimiters or ignore-instructions are used for image data. Capability inventory: Bash command execution viainfsh. Sanitization: No content or metadata validation is performed on the input images before processing.
Audit Metadata