nano-banana
Pass
Audited by Gen Agent Trust Hub on Feb 25, 2026
Risk Level: SAFEREMOTE_CODE_EXECUTIONCOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [REMOTE_CODE_EXECUTION]: The skill provides an installation command
curl -fsSL https://cli.inference.sh | shto set up theinfshCLI tool. This is a standard installation method provided by the vendor (inference-sh-9) for their official command-line interface and targets their own infrastructure. - [COMMAND_EXECUTION]: The skill requires the
Bashtool to executeinfshcommands, which are used to list apps and run image generation tasks via the inference.sh platform. - [PROMPT_INJECTION]: The skill contains an indirect prompt injection surface as it processes user-provided prompts and image URLs. 1. Ingestion points: The
promptandimagesparameters in theinfsh app runcommands. 2. Boundary markers: Input is handled as structured JSON via the--inputargument. 3. Capability inventory: The skill has the ability to execute shell commands via theBashtool. 4. Sanitization: The skill does not describe any specific sanitization or filtering of the user-provided text before it is sent to the Gemini models.
Audit Metadata