Nano Banana 2

• Outcome: Pass
• Latest audit: May 29, 2026 at 8:28 PM UTC
• Version:
  1.0.0

Overview

This is a straightforward NanoPhoto image-generation skill that discloses its API key use and sends user-provided prompts or public image URLs to NanoPhoto.

Install only if you trust NanoPhoto with the prompts and public image URLs you submit, and if you are comfortable granting this skill a NanoPhoto API key that can spend credits. Prefer the platform secure env setting and avoid private or sensitive images.

SkillSpector

By NVIDIA

Vulnerability Patterns

• MCP Least Privilege: Underdeclared Capability, Wildcard Permission, Missing Permission Declaration
• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access
• Supply Chain: Unpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (1)

Lp3

Medium

• Category: MCP Least Privilege
• Confidence: 88% confidence
• Finding: The skill documentation indicates capabilities to read environment variables, access local files, and make network requests, but these capabilities are not explicitly declared as permissions. That creates a transparency and governance gap: users or hosting platforms may not realize the skill can read credentials from the environment or fallback config and transmit data to a remote service.

VirusTotal

64/64 vendors flagged this skill as clean.