Nano Banana Image Creator

• Analyzed: May 12, 2026, 4:03 AM
• Findings: 1
• Version: 1.0.0
• Hash: 08d7093526d814be1e630c07f6f0ee575a40c3b487c625ad6727790e0197ca59
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill is classified as suspicious due to potential vulnerabilities related to file system access. The `generate_image.py` script processes user-controlled paths for both input (`--input-image`) and output (`--filename`). This introduces a risk of path traversal, allowing an attacker (or a prompt-injected agent) to read or write files outside the intended directory. Additionally, the script sends user-provided image data to Google's GenAI API, which, while intended functionality, could lead to unintended exposure of sensitive images if a user is tricked into providing them. There is no evidence of intentional malicious behavior like exfiltration to unauthorized endpoints or backdoor installation.