nano-banana
Fail
Audited by Snyk on Feb 15, 2026
Risk Level: CRITICAL
Full Analysis
CRITICAL E005: Suspicious download URL detected in skill instructions.
- Suspicious download URL detected (high risk: 0.70). The link points to a third‑party GitHub repository (not an official vendor site) that would be installed and executed as an unverified Gemini CLI extension (including commands that auto‑approve actions), so while it’s not an obvious direct malware host it is potentially risky without vetting the repo contents and maintainer reputation.
Audit Metadata