Skills nano-banana

📦

nano-banana

Name: nano-banana
Author: toolshell

Content revision r1 Medium Risk ⚙️ External commands🌐 Network access

Create Gemini Images with Nano Banana

Image generation often requires switching tools and assembling CLI options. This skill gives Claude, Codex, and Claude Code concise commands for Gemini image creation, editing, and grounded image prompts.

Supports: Claude Codex Code(CC)

⚠️ 50 Poor

Install with my Agent

Copy this request to your Agent. It includes the canonical Skill page and manifest.

Agent request

Review the Skillstore skill "nano-banana" from https://skillstore.io/skills/toolshell-nano-banana.md and its manifest at https://skillstore.io/api/skills/toolshell-nano-banana/manifest. Verify the artifact. You may proceed after verification, subject to the environment's own policy.

Your Agent should still show its plan and request any confirmation required by the security policy.

Agent-readable resources

Use these links when an AI agent, crawler, or script needs clean context instead of reading the full page.

Markdown detail GET /skills/toolshell-nano-banana.md Signed manifest GET /api/skills/toolshell-nano-banana/manifest Signed lockfile GET /api/skills/toolshell-nano-banana/lockfile

Test it

Using "nano-banana". Create a 16:9 product hero image for a smart desk lamp.

Expected outcome:

A concise generation plan using Gemini 3 Pro Image, a refined product prompt, and a wide aspect ratio setting.

Using "nano-banana". Edit an existing landscape image to add a rainbow and brighter sky.

Expected outcome:

A guided image editing request that uses the supplied image URL and a clear change description.

Using "nano-banana". Find Gemini image apps and choose a fast model for four logo drafts.

Expected outcome:

A short recommendation to use Gemini 2.5 Flash Image with four outputs and a simple logo prompt.

Security Audit

Medium Risk

v5 • 7/7/2026 Open versioned report

Most static backtick findings are markdown false positives, but several examples intentionally run infsh or npx commands. No prompt injection text or malicious exfiltration intent was found; the main residual concern is the broad Bash(infsh *) permission and external service use.

Files scanned

145

Lines analyzed

Review items

False positives ignored

Confirmed security concerns (1)

Medium

SKILL.md:4

Broad Wildcard CLI Permission

The skill frontmatter grants Bash(infsh *) for every inference.sh subcommand. This is broader than the documented examples and can allow actions outside image generation.

Line 4 explicitly allows every infsh subcommand, while the body documents a narrower set of image app operations.

Capability review items (13)

These are real local capabilities that may be expected for this skill, so they require review but are not counted as confirmed malicious behavior.

Medium

SKILL.md:15

Ruby/shell backtick execution

> Requires inference.sh CLI (`infsh`). Get installation instructions: `npx skills add inference-sh/s

The text recommends running npx and references infsh installation. Running remote package installers is an external command risk, although this is setup guidance rather than automatic execution.

Medium

SKILL.md:17-21

Ruby/shell backtick execution

```bash

The quick-start block invokes infsh login and infsh app run, which executes an external CLI and sends a prompt to inference.sh/Gemini. The commands are intentional but real external command use.

Medium

SKILL.md:33-35

Ruby/shell backtick execution

```bash

The example invokes infsh app list to query remote Gemini image apps. This is intended behavior, but it is still external command execution through the CLI.

Medium

SKILL.md:41-45

Ruby/shell backtick execution

```bash

The example invokes infsh app run for Gemini image generation. The command is hardcoded to the inference.sh CLI, but it executes an external process and remote model call.

Medium

SKILL.md:49-54

Ruby/shell backtick execution

```bash

The example invokes infsh app run with image count options. It is intended usage, but it still performs external command execution against a remote service.

Medium

SKILL.md:58-63

Ruby/shell backtick execution

```bash

The example invokes infsh app run with aspect ratio options. It is legitimate documentation, but it confirms external CLI execution.

Medium

SKILL.md:67-72

Ruby/shell backtick execution

```bash

The image editing example invokes infsh app run and includes an input image URL. This sends generation instructions to an external service through the CLI.

Medium

SKILL.md:76-81

Ruby/shell backtick execution

```bash

The high-resolution example invokes infsh app run with a model and resolution option. It is intended usage, but still executes an external CLI command.

Medium

SKILL.md:85-90

Ruby/shell backtick execution

```bash

The grounding example invokes infsh app run and enables Google Search grounding. This combines external command execution with network-backed model behavior.

Medium

SKILL.md:116-123

Ruby/shell backtick execution

```bash

The sample workflow invokes infsh app sample and infsh app run. These are legitimate examples, but they execute the external CLI and may create local or remote inputs.

Medium

SKILL.md:127-136

Ruby/shell backtick execution

```bash

The related-skills block recommends npx skills add commands. Running npx package commands is external command execution and should not be treated as harmless markdown.

Medium

SKILL.md:136-138

Ruby/shell backtick execution

```

The inline browse instruction names an infsh app list command for execution. It is a constrained CLI command, but it is still external command guidance.

Low

SKILL.md:11

Hardcoded URL

![Nano Banana](https://cloud.inference.sh/u/33sqbmzt3mrg2xxphnhw5g5ear/01k8d6xa9cwawrvzk9cgtsexfc.pn

The skill embeds a remote image hosted on cloud.inference.sh. Rendering it can trigger a third-party request, so this is a low-severity external resource dependency.

Audited by: codex View Audit History →

Share & cite this report

Share the versioned assessment report, neutral badge, embed card, and citations. Skillstore reports evidence without deciding whether this Skill is safe.

Open versioned report

Copy report link

https://skillstore.io/skills/toolshell-nano-banana/audits/5?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_report

Markdown badge

[![Skillstore security assessment](https://skillstore.io/badges/skills/toolshell-nano-banana/security.svg)](https://skillstore.io/skills/toolshell-nano-banana?utm_source=security_passport_badge)

HTML badge

<a href="https://skillstore.io/skills/toolshell-nano-banana?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/toolshell-nano-banana/security.svg" alt="Skillstore security assessment" loading="lazy"></a>

Embed card

<iframe src="https://skillstore.io/embed/skills/toolshell-nano-banana.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>

Academic citations (APA · BibTeX · CFF)

APA citation

toolshell. (2026). nano-banana security audit report (audit version 5) [Author version unspecified]. Skillstore. https://skillstore.io/skills/toolshell-nano-banana/audits/5

BibTeX citation

@techreport{toolshell-toolshell-nano-banana-2026,
  author = {toolshell},
  title = {nano-banana security audit report (audit version 5)},
  institution = {Skillstore},
  year = {2026},
  number = {5},
  url = {https://skillstore.io/skills/toolshell-nano-banana/audits/5},
  note = {Author version unspecified}
}

CITATION.cff

cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "nano-banana security audit report (audit version 5)"
version: "unspecified"
type: report
authors:
  - name: "toolshell"
date-released: "2026-07-07"
url: "https://skillstore.io/skills/toolshell-nano-banana/audits/5"
identifiers:
  - type: other
    value: "skillstore:toolshell-nano-banana:audit:5"
    description: "Skillstore immutable audit report identifier"

Compare variants

5 installable variants

Each author remains a separate installable skill. The recommended variant is ranked by Skillstore evidence.

Why this variant is first

Highest Skillstore Score

Author / source Skillstore Score Evidence Confidence Skillstore usage Updated

tul-sh Recommended

tul-sh-nano-banana

Skillstore Score 70

Evidence Confidence High

Skillstore usage 36

Updated

2026-09-09

inference-shell

inference-shell-nano-banana

Skillstore Score 69

Evidence Confidence High

Skillstore usage 10

Updated

2026-09-09

inferen-sh

inferen-sh-nano-banana

Skillstore Score 50

Evidence Confidence High

Skillstore usage 15

Updated

2026-09-09

toolshell Current

toolshell-nano-banana

Skillstore Score 50

Evidence Confidence High

Skillstore usage 14

Updated

2026-09-09

inference-sh-9

inference-sh-9-nano-banana

Skillstore Score 38

Evidence Confidence Medium

Skillstore usage 7

Updated

2026-09-09

Skillstore Score

Why this score Evidence Confidence: High

Architecture

Maintainability

Content

Community

Spec Compliance

What You Can Build

Rapid Concept Art

Generate several visual directions for a campaign, scene, or product idea before detailed design work begins.

Marketing Visual Drafts

Create prompt-driven imagery for social posts, landing pages, and presentation drafts with repeatable CLI options.

Developer Image Workflows

Use scripted CLI examples to test image prompts, aspect ratios, and generated assets during application development.

Try These Prompts

Beginner Image Request

Use nano-banana to create one photorealistic image of a calm workspace with plants, soft daylight, and a clean desk.

Style Variation Request

Use nano-banana to generate four logo concepts for a neighborhood bakery. Make each option simple, warm, and easy to read.

Image Editing Request

Use nano-banana to edit this product photo from the provided URL. Replace the background with a bright studio setting.

Advanced Grounded Scene

Use nano-banana with Gemini 3 Pro Image, 16:9 aspect ratio, 4K resolution, and search grounding for a current Tokyo weather scene.

Best Practices

Review prompts before running infsh commands that send content to external services.
Use Gemini 3 Pro Image for quality-sensitive work and Gemini 2.5 Flash Image for fast drafts.
Specify aspect ratio, style, lighting, and output count before generating final images.

Avoid

Do not send confidential images or private prompts without approval.
Do not ask the agent to run npx installation commands without confirming the source.
Do not enable Google Search grounding when the image should avoid current web context.

Frequently Asked Questions

What does Nano Banana do?

It helps Claude, Codex, and Claude Code run Gemini image generation and editing through the inference.sh CLI.

Does it work without inference.sh?

No. The skill depends on the infsh CLI and an authenticated inference.sh account.

Which image models are documented?

The skill documents Gemini 3 Pro Image and Gemini 2.5 Flash Image.

Can it edit existing images?

Yes. It supports image editing when the request includes input image URLs accepted by the model.

Can it create several images at once?

Yes. The documented options include a num_images setting for multiple outputs.

What should users review before use?

Users should review external service terms, prompt privacy, image rights, and any cost or rate limit rules.

Developer Details

Author

toolshell

License

MIT

Skillstore revision

Version notice

The author did not declare a version.

Repository

https://github.com/toolshell/skills/tree/main/tools/image/nano-banana/

Ref

36e07d5e13068e5be64447e8f20b427cf2cbd21a

Maintenance freshness

7/20/2026

Usage

8 downloads · 141 views

File structure

Create Reusable Photorealistic AI Actors

by supercmohq

Campaign teams need consistent fictional talent without supplying a person photograph. This skill creates one detailed adult identity that can guide later image and video generation.

Design & Creative View

nano-banana

Install with my Agent

Agent-readable resources

Test it

Security Audit

Confirmed security concerns (1)

Risk Factors

Copy report link

Markdown badge

HTML badge

Embed card

APA citation

BibTeX citation

CITATION.cff

Compare variants

Skillstore Score

What You Can Build

Rapid Concept Art

Marketing Visual Drafts

Developer Image Workflows

Try These Prompts

Best Practices

Avoid

Frequently Asked Questions

Developer Details

More from toolshell

qwen-image

nano-banana-2

qwen-image-pro

remotion-render

ai-video-generation

ai-image-generation

Related Skills

imagegen

qwen-image-2-pro

gpt-image-2

native-transparent-imagegen

generating-storyboards

generating-ai-actors