Skills nano-banana

📦

nano-banana

Name: nano-banana
Author: inference-sh-9

Content revision r1 Critical ⚙️ External commands🌐 Network access

Create Gemini Images with Inference.sh

Image generation workflows often need model-specific CLI syntax. This skill gives Claude, Codex, and Claude Code structured prompts for Gemini image creation and editing through inference.sh.

Supports: Claude Codex Code(CC)

⚠️ 38 Poor

Do not auto-install this skill.

The canonical policy requires operator review before any installation action.

Install with my Agent

Copy this request to your Agent. It includes the canonical Skill page and manifest.

Agent request

Review the Skillstore skill "nano-banana" from https://skillstore.io/skills/inference-sh-9-nano-banana.md and its manifest at https://skillstore.io/api/skills/inference-sh-9-nano-banana/manifest. Verify the artifact. Do not auto-install. Inspect the skill and report your findings, then wait for an operator or manual installation decision.

Your Agent should still show its plan and request any confirmation required by the security policy.

Agent-readable resources

Use these links when an AI agent, crawler, or script needs clean context instead of reading the full page.

Markdown detail GET /skills/inference-sh-9-nano-banana.md Signed manifest GET /api/skills/inference-sh-9-nano-banana/manifest Signed lockfile GET /api/skills/inference-sh-9-nano-banana/lockfile

Test it

Using "nano-banana". Create a 16:9 image of a futuristic city at sunset.

Expected outcome:

The assistant selects Gemini 3 Pro Image, asks before any external call, and returns generated image links with a short description.

Using "nano-banana". Edit a landscape image URL by adding a rainbow.

Expected outcome:

The assistant prepares an image-edit request, uses the supplied URL, and returns the edited image with notes about visible changes.

Using "nano-banana". Compare fast and high-quality image options.

Expected outcome:

The assistant recommends Gemini 2.5 Flash Image for speed and Gemini 3 Pro Image preview for higher detail.

Security Audit

Critical

v4 • 7/6/2026 Open versioned report

The audit confirmed a critical pipe-to-shell installer in the Quick Start and one network finding tied to that installer. Most external-command findings are Markdown backtick false positives, but the skill also grants broad infsh CLI access. The skill should not be auto-installed until installer guidance and external data handling are tightened.

Files scanned

144

Lines analyzed

Review items

False positives ignored

Confirmed security concerns (3)

Critical

SKILL.md:16

Pipe to shell pattern

curl -fsSL https://cli.inference.sh | sh && infsh login

The Quick Start downloads a remote script from cli.inference.sh and pipes it directly to sh. This gives the remote endpoint shell execution before the user can inspect the installer.

Medium

SKILL.md:4

Broad External CLI Permission

The skill grants Bash access to `infsh *`, allowing any inference.sh CLI subcommand. This can send prompts, image URLs, and local input files to external services when the agent runs commands.

The allowed-tools directive directly permits all infsh subcommands. The examples show networked model calls, so the external service exposure is real.

Medium

SKILL.md:21

Unverified Installer Safety Assurance

The skill states that the remote install script has limited behavior and checksum verification, but it does not pin a script hash or version. This reassurance can make users trust the pipe-to-shell command without independent inspection.

The safety claim is explicit in the install note. The file provides a checksum link but no pinned expected value inside the skill.

Capability review items (2)

These are real local capabilities that may be expected for this skill, so they require review but are not counted as confirmed malicious behavior.

Critical

SKILL.md:16

Hardcoded URL

curl -fsSL https://cli.inference.sh | sh && infsh login

The URL is not just a documentation link; it is the source for a script executed by sh on the same line. Compromise of that endpoint could lead to arbitrary code execution.

Low

SKILL.md:11

Hardcoded URL

![Nano Banana](https://cloud.inference.sh/u/33sqbmzt3mrg2xxphnhw5g5ear/01k8d6xa9cwawrvzk9cgtsexfc.pn

The Markdown image embeds remote content from cloud.inference.sh, which renderers may fetch automatically. This is a low privacy and tracking risk, not direct code execution.

Detected Patterns

Pipe to shell pattern

Audited by: codex View Audit History →

Share & cite this report

Share the versioned assessment report, neutral badge, embed card, and citations. Skillstore reports evidence without deciding whether this Skill is safe.

Open versioned report

Copy report link

https://skillstore.io/skills/inference-sh-9-nano-banana/audits/4?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_report

Markdown badge

[![Skillstore security assessment](https://skillstore.io/badges/skills/inference-sh-9-nano-banana/security.svg)](https://skillstore.io/skills/inference-sh-9-nano-banana?utm_source=security_passport_badge)

HTML badge

<a href="https://skillstore.io/skills/inference-sh-9-nano-banana?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/inference-sh-9-nano-banana/security.svg" alt="Skillstore security assessment" loading="lazy"></a>

Embed card

<iframe src="https://skillstore.io/embed/skills/inference-sh-9-nano-banana.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>

Academic citations (APA · BibTeX · CFF)

APA citation

inference-sh-9. (2026). nano-banana security audit report (audit version 4) [Author version unspecified]. Skillstore. https://skillstore.io/skills/inference-sh-9-nano-banana/audits/4

BibTeX citation

@techreport{inference-sh-9-inference-sh-9-nano-banana-2026,
  author = {inference-sh-9},
  title = {nano-banana security audit report (audit version 4)},
  institution = {Skillstore},
  year = {2026},
  number = {4},
  url = {https://skillstore.io/skills/inference-sh-9-nano-banana/audits/4},
  note = {Author version unspecified}
}

CITATION.cff

cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "nano-banana security audit report (audit version 4)"
version: "unspecified"
type: report
authors:
  - name: "inference-sh-9"
date-released: "2026-07-06"
url: "https://skillstore.io/skills/inference-sh-9-nano-banana/audits/4"
identifiers:
  - type: other
    value: "skillstore:inference-sh-9-nano-banana:audit:4"
    description: "Skillstore immutable audit report identifier"

Compare variants

5 installable variants

Each author remains a separate installable skill. The recommended variant is ranked by Skillstore evidence.

Why this variant is first

Highest Skillstore Score

Author / source Skillstore Score Evidence Confidence Skillstore usage Updated

tul-sh Recommended

tul-sh-nano-banana

Skillstore Score 70

Evidence Confidence High

Skillstore usage 34

Updated

2026-08-21

inference-shell

inference-shell-nano-banana

Skillstore Score 69

Evidence Confidence High

Skillstore usage 10

Updated

2026-08-21

toolshell

toolshell-nano-banana

Skillstore Score 50

Evidence Confidence High

Skillstore usage 13

Updated

2026-08-21

inferen-sh

inferen-sh-nano-banana

Skillstore Score 50

Evidence Confidence High

Skillstore usage 13

Updated

2026-08-21

inference-sh-9 Current

inference-sh-9-nano-banana

Skillstore Score 38

Evidence Confidence Medium

Skillstore usage 5

Updated

2026-08-21

Skillstore Score

Why this score Evidence Confidence: Medium

Architecture

Maintainability

Content

Community

Spec Compliance

What You Can Build

Prototype Image Directions

Generate visual concepts with model, aspect ratio, and style choices already mapped to CLI options.

Add Agent Image Workflows

Use Claude, Codex, or Claude Code to prepare repeatable Gemini image commands through inference.sh.

Create Campaign Variants

Generate several image options for ads, social posts, or landing page concepts with consistent prompt structure.

Try These Prompts

Create One Image

Use nano-banana to create one square image of a clean product photo for a stainless steel water bottle. Use Gemini 2.5 Flash Image.

Edit an Image

Use nano-banana to edit this image URL: [image URL]. Add a rainbow in the sky and keep the landscape realistic.

Generate Variations

Use nano-banana to generate four minimalist logo directions for a coffee shop. Use a warm palette, simple geometry, and clean typography.

Build a Grounded Workflow

Use nano-banana with Gemini 3 Pro Image. Visualize the current weather in Tokyo as an editorial illustration with Google Search grounding enabled. Explain external calls before running.

Best Practices

Review any CLI install command before running it.
Use non-sensitive prompts and image inputs unless external processing is approved.
Specify model, aspect ratio, count, and style before generation.

Avoid

Piping a remote installer to a shell without inspection.
Uploading private images or confidential prompts without approval.
Relying on default model settings when output size or quality matters.

Frequently Asked Questions

Does this skill generate images directly?

It guides the assistant to use inference.sh CLI commands for Gemini image models.

Which tools can use it?

It declares support for Claude, Codex, and Claude Code.

Do I need an inference.sh account?

Yes. The examples require the infsh CLI and login.

Can it edit existing images?

Yes. The skill documents image editing with input image URLs.

Does it make network requests?

Yes. The CLI communicates with inference.sh and model services, and search grounding can call external search.

Is the quick install command safe?

The report flags the remote installer pattern. Inspect scripts and verify checksums before execution.

Developer Details

Author

inference-sh-9

License

MIT

Skillstore revision

Version notice

The author did not declare a version.

Repository

https://github.com/inference-sh-9/skills/tree/main/skills/nano-banana/

Ref

a06681402992ceae98ba04d54cfd4ab004862696

Maintenance freshness

7/18/2026

Usage

3 downloads · 172 views

File structure

📄 SKILL.md

More from inference-sh-9

View all

📦

agent-ui

Build React Agent Interfaces

Teams need agent chat interfaces without rebuilding streaming, approvals, and tool displays. This skill guides setup of the inference.sh Agent component in React and Next.js.

Coding & Development View

📦

tools-ui

Add Tool Lifecycle UI to Agent Apps

Agent applications need clear tool status, approval, and result displays. This skill provides React and Next.js component guidance for those workflows.

Coding & Development View

📦

widgets-ui

Render JSON Widgets in React

Agent output often needs interactive UI instead of plain text. This skill shows how to render structured widget definitions as React and Next.js components.

Design & Creative View

📦

chat-ui

Build React Chat Interfaces

Teams need chat interfaces that match modern React apps. This skill provides shadcn-style components and patterns for messages, inputs, avatars, and streaming states.

Coding & Development View

📦

prompt-engineering

Improve AI Prompts for Text, Images, and Video

AI results often fail when prompts are vague or poorly structured. This skill provides reusable patterns for LLM, image, and video prompts.

Productivity View

📦

web-search

Search Web Sources with Tavily and Exa

Research tasks need current web evidence and clean page text. This skill runs inference.sh search and extraction apps for Tavily and Exa.

Research & Learning View

View all

📦

imagegen

Create and Edit Project Images

by openai

Producing consistent raster assets requires precise prompts, careful edits, and reliable output handling. This skill structures requests, creates or edits visuals, validates results, and saves project-ready files.

Design & Creative View

📦

qwen-image-2-pro

Generate Text-Rich Images with Qwen Pro

by inference-shell

Design teams need image prompts that preserve text and layout details. This skill guides Claude, Codex, or Claude Code to call Qwen-Image-2-Pro through inference.sh.

Design & Creative View

📦

ai-image-generation

Generate AI Images With Inference.sh

by tool-belt

Teams need fast access to many hosted image models without learning each provider API. This skill guides Claude, Codex, and Claude Code through inference.sh CLI workflows for generation, editing, upscaling, and stitching.

Design & Creative View

📦

gpt-image-2

Generate GPT Image 2 Assets on RunComfy

by runcomfy-com

Teams need image prompts and edits that preserve text, layout, and brand details. This skill guides Claude, Codex, and Claude Code to use RunComfy's GPT Image 2 endpoints with clear size, edit, and privacy rules.

Design & Creative View

📦

generating-storyboards

Create Consistent Video Storyboards

by supercmohq

Video concepts can lose continuity when clips are planned separately. This skill creates sequential storyboard sheets that preserve characters, products, settings, and visual states.

Design & Creative View

📦

generating-ai-actors

Create Reusable Photorealistic AI Actors

by supercmohq

Campaign teams need consistent fictional talent without supplying a person photograph. This skill creates one detailed adult identity that can guide later image and video generation.

Design & Creative View

nano-banana

Install with my Agent

Agent-readable resources

Test it

Security Audit

Confirmed security concerns (3)

Risk Factors

Detected Patterns

Copy report link

Markdown badge

HTML badge

Embed card

APA citation

BibTeX citation

CITATION.cff

Compare variants

Skillstore Score

What You Can Build

Prototype Image Directions

Add Agent Image Workflows

Create Campaign Variants

Try These Prompts

Best Practices

Avoid

Frequently Asked Questions

Developer Details

More from inference-sh-9

agent-ui

tools-ui

widgets-ui

chat-ui

prompt-engineering

web-search

Related Skills

imagegen

qwen-image-2-pro

ai-image-generation

gpt-image-2

generating-storyboards

generating-ai-actors