Nano Banana 2

• Analyzed: May 11, 2026, 4:53 AM
• Findings: 1
• Version: 0.1.1
• Hash: 8878f3e4876b89b9fdc014a47975d4ce2eb0c690163e702f34709996e0648bcd
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill's purpose is to generate images using the `inference.sh` CLI, which is clearly stated and consistently demonstrated across all examples in `SKILL.md`. The `allowed-tools` permission is appropriately scoped to `Bash(infsh *)`, meaning the AI agent can only execute commands starting with `infsh`. While the `SKILL.md` includes `curl -fsSL https://cli.inference.sh | sh` as an installation instruction for the `infsh` CLI, this is a prerequisite for the human user, not a command the AI agent is allowed or instructed to execute as part of its skill operation. There is no evidence of prompt injection against the agent, data exfiltration, persistence mechanisms, or other malicious intent.