nano-banana-2

Fail

Audited by Socket on Mar 10, 2026

1 alert found:

Obfuscated File
Obfuscated FileHIGH
SKILL.md

The skill pattern is coherent with its stated purpose of image generation/editing via a CLI tool and optional grounding. There is no explicit credential handling or suspect download/execution chains in the provided snippet. Minor security considerations include potential data flows to external services, input sanitization for command-line arguments, and the trustworthiness of external assets and the inference.sh platform. Overall, the footprint is primarily benign with moderate data-flow exposure; no clear exfiltration or credential-stealing patterns are evident.

Confidence: 98%
Audit Metadata
Analyzed At
Mar 10, 2026, 09:26 PM
Package URL
pkg:socket/skills-sh/inference-shell%2Fskills%2Fnano-banana-2%2F@804d19f3516a2bf7145893bdd3cc917ae79ec9da