nano-banana-image-gen

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.80). SKILL.md's "Visual grounding (NB2 only)" explicitly states NB2 "searches the internet for reference images" so the agent fetches and ingests open/public third‑party images (untrusted user-generated content) as part of its workflow, which can materially influence generation behavior and enable indirect prompt injection.