Versioned security assessment

Report ID: SA-9C05A777

5/28/2026, 9:29:28 AM

nano-banana-edit security assessment v1

Skill Security Certification Report

Audit History
Audit model: claude Historical report
Skill name
nano-banana-edit
Version
v1
Maintainer
doany-ai
Source
github.com/doany-ai/skills/tree/main/nano-banana-edit/
Coverage
1 Files scanned · 186 Lines analyzed
Policy version
Unavailable

Highest confirmed finding severity

High

3 confirmed security findings require attention.

Installation context

Historical evidence

This report may not describe the currently installable artifact. Open the current Skill page for install guidance.

Open current Skill page

This report does not block or authorize the manifest or ZIP.

Static analysis flagged 78 potential issues, but evaluation reveals all are false positives. The skill is a thin wrapper for the RunComfy CLI that invokes `runcomfy run google/nano-banana-2/edit` to call a legitimate image editing API. The "external commands" detections are markdown bash command examples, not executable code. The "path traversal" flags reference placeholder parameter examples (`<absolute/path>`) in documentation. The "weak crypto" detection is frontmatter YAML. Network access is scoped to RunComfy API endpoints only. Security controls are properly documented including JSON string transmission (no shell injection) and secure token storage with mode 0600.

Report position

Historical report

Open audit history before using this report to install.

Audit attestation

Not attestable

The required immutable binding is incomplete.

Human verification

Not verified

No human verification is recorded for this report.

Coverage

1 Files scanned · 186 Lines analyzed

6 items shown for review

Limitations

This report does not claim runtime or sandbox execution and does not prove the absence of side effects.

Evidence chain

Follow the evidence from source binding to the install contract. Available evidence supports verification; it is not a safety guarantee.

  1. Source

    Binding unavailable

  2. Artifact

    Identity incomplete

  3. Audit

    Complete

  4. Install contract

    Open manifest to verify

    Open manifest

Capabilities observed

Observed means this report recorded supporting evidence. Not recorded does not prove that a capability is absent.

Contains scripts

May execute code included with the Skill.

Not recorded by this audit

Network access

May connect to external services.

Observed in 3 evidence locations

Filesystem access

May read or write local files.

Not recorded by this audit

Env variables

May read values from the process environment.

Not recorded by this audit

External commands

May invoke commands or programs outside the Skill.

Observed in 5 evidence locations

Capability review items (3)
High
SKILL.md:71SKILL.md:82SKILL.md:95
Static Analysis Pattern Detected: Path Traversal
Scanner flagged lines 71, 82, 95 as path traversal. Evaluation shows this is a false positive: these lines contain `<absolute/value>` style placeholder examples in documentation explaining CLI parameter types. These are not actual path traversal attempts.
Scanner flagged `<absolute/path>` parameter examples as traversal, but these are documented CLI parameter type examples with placeholder names, not actual code execution.
Medium
SKILL.md:10
Static Analysis Pattern Detected: External Commands
Scanner flagged 57 locations as 'Ruby/shell backtick execution'. Evaluation shows this is a false positive: these are bash command examples in markdown documentation blocks showing CLI usage syntax. The skill is a documentation wrapper, not executable code.
All flagged locations are markdown code fences containing `runcomfy run` command examples for documentation purposes. No backtick code execution occurs.
Low
SKILL.md:13
Static Analysis Pattern Detected: Hardcoded URLs
Scanner flagged multiple URLs as hardcoded. Evaluation shows these are legitimate API endpoints for the RunComfy Model API service being wrapped by this skill.
Hardcoded URLs are legitimate RunComfy service endpoints documented for proper API usage. Network access is scoped to these whitelisted domains only.

Risk findings

Confirmed security concerns are separated from items that still need review.

Confirmed security concerns (3)

RISK-001 High
SKILL.md:4SKILL.md:162
Static Analysis Pattern Detected: Weak Cryptographic Algorithm
Scanner flagged lines 4 and 162 as containing weak crypto. Evaluation shows this is a false positive: line 4 is YAML frontmatter with model documentation, line 162 is exit code documentation. No cryptographic operations present in this skill.
Static scanner detected pattern in YAML frontmatter and exit code table that triggered crypto detection heuristic, but neither contains cryptographic operations.
RISK-002 High
SKILL.md:181
Static Analysis Pattern Detected: Hidden File Access
Scanner flagged line 181 as hidden file access. Evaluation shows this is documented security practice: token is stored at `~/.config/runcomfy/token.json` with mode 0600 (owner-only read/write). This is intentional secure credential handling, not a vulnerability.
Line 181 explicitly documents secure token storage with appropriate file permissions. This is a security best practice, not an exploitation of hidden files.
RISK-003 Low
SKILL.md:38
Static Analysis Pattern Detected: System Reconnaissance
Scanner flagged line 38 as system reconnaissance. Evaluation shows this is simple user intent detection for routing requests to the correct skill.
Line 38 contains routing logic for skill selection based on explicit user phrase matching ('nano banana edit'). Standard skill triggering pattern, not reconnaissance.

Expert evidence

Immutable subject identity, scanner metadata, dismissed matches, and source-level evidence.

Artifact subject

Marketplace commit
Unavailable
Content hash
Unavailable
Tree hash
Unavailable
Skill path
Unavailable
Audit payload hash
Unavailable

Analysis metadata

Audit model: claude

Analysis state: Complete

Scope is limited to the recorded files, lines, methods, and evidence. No runtime or sandbox execution is claimed.

Verify and export

JSON report CITATION.cff SARIF 2.1.0 Signed installation manifest

The manifest and lockfile bind install artifacts to cryptographic hashes. This integrity claim is separate from the security assessment.

Audit attestation: not_attestable