nano-banana
Pass
Audited by Gen Agent Trust Hub on Mar 17, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes the
infshCLI tool to perform image generation and management tasks.\n - Evidence: Use of
infsh login,infsh app run, andinfsh app listthroughout the SKILL.md documentation.\n - Context: Command execution is strictly limited to the
infshprefix via theallowed-toolsconfiguration.\n- [EXTERNAL_DOWNLOADS]: The documentation suggests installing additional tools and related skills via npx.\n - Evidence: Command
npx skills add inference-sh/skills@agent-toolsfound in SKILL.md.\n - Context: These downloads target the official and verified vendor namespace ('inference-sh-9') and represent standard installation procedures.\n- [PROMPT_INJECTION]: The skill handles natural language prompts as input for AI models, creating a potential surface for indirect prompt injection.\n
- Ingestion points: The
promptandimagesfields within the JSON input string for theinfshcommand (SKILL.md).\n - Boundary markers: Inputs are encapsulated within a structured JSON object, which helps separate user data from command-line instructions.\n
- Capability inventory: The skill's capabilities are limited to executing the
infshbinary via Bash.\n - Sanitization: Input validation and safety filtering are managed by the underlying inference.sh platform and the Google Gemini models.
Audit Metadata