nano-banana

Fail

Audited by Snyk on Feb 15, 2026

Risk Level: CRITICAL
Full Analysis

CRITICAL E005: Suspicious download URL detected in skill instructions.

  • Suspicious download URL detected (high risk: 0.70). The link points to a third‑party GitHub repository (not an official vendor site) that would be installed and executed as an unverified Gemini CLI extension (including commands that auto‑approve actions), so while it’s not an obvious direct malware host it is potentially risky without vetting the repo contents and maintainer reputation.
Audit Metadata
Risk Level
CRITICAL
Analyzed
Feb 15, 2026, 09:08 PM