Security audit
nano-banana
Security checks across malware telemetry and agentic risk
Overview
This skill appears to be a straightforward RunAPI image-generation helper with disclosed CLI and SDK use and no artifact-backed malicious behavior.
Install only if you intend to use RunAPI for Nano Banana image generation or editing. Expect the skill to call RunAPI over the network, use the runapi CLI or language SDKs, and possibly use a RunAPI API key or saved CLI login; keep that key scoped to RunAPI and be aware generated file URLs are temporary and should be saved to your own storage if needed.
SkillSpector
By NVIDIA
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
VirusTotal
64/64 vendors flagged this skill as clean.
Static analysis
No suspicious patterns detected.