Security audit
nano-banana
Security checks for vulnerabilities and agentic risk
Overview
This skill is a prompt-writing guide for Gemini/Nano Banana image generation and does not install code, run commands, or request hidden access.
Before installing, understand that this skill helps an agent draft prompts and may guide the agent to use brand-profile.md and user-provided reference images. It also points to a separate Nano Banana/WoopSocial integration for actual generation and upload, so review that integration separately before using credentials or publishing content.
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Static analysis
No suspicious patterns detected.