nano-banana
Pass
Audited by Gen Agent Trust Hub on Apr 16, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill references installation instructions for the
infshCLI tool from theinference-shGitHub repository. - [COMMAND_EXECUTION]: The skill uses the
infshcommand-line utility to interface with image generation models. - [PROMPT_INJECTION]: The skill is susceptible to indirect prompt injection as it processes user-provided prompts and incorporates them into CLI commands.
- Ingestion points: User-defined
promptstrings in image generation requests (as described in SKILL.md). - Boundary markers: Prompts are encapsulated within a JSON structure for the CLI input.
- Capability inventory: Accesses the
infshCLI tool via the Bash tool to perform image generation and manipulation. - Sanitization: No explicit sanitization or validation of the prompt content is documented within the skill.
Audit Metadata