Nano Banana Pro

Security scan

Security ScanVirusTotalVirusTotalSuspiciousView report →OpenClawOpenClawSuspiciousmedium confidenceThe skill appears to implement an image-generation tool for Gemini as described, but the registry metadata omits required items (an API key and the 'uv' runner) and there are small inconsistencies that you should resolve before trusting it.Details ▾ℹPurpose & CapabilityName and description match the included script: it calls Google's GenAI client to generate/edit images and uses Pillow to save PNGs. However, the registry metadata claims no required env vars or binaries while the script and SKILL.md clearly depend on an API key (GEMINI_API_KEY or --api-key) and on the 'uv' runner; that mismatch is inconsistent and should be corrected.✓Instruction ScopeSKILL.md instructions are narrowly focused on image generation/editing: how to run the script, resolution mapping, filename conventions, and preflight checks. The instructions and script do not request unrelated files, credentials, or send data to unexpected endpoints beyond the GenAI client. They do instruct saving output into the user's current working directory (explicit) which is expected for this use case.✓Install MechanismNo install/spec is provided (instruction-only with an included Python script). The script lists dependencies (google-genai, pillow) in comments but there is no automated install step; this lowers installer risk but means the environment must separately install those packages. No downloads from unknown URLs are present.!CredentialsThe script requires an API key (GEMINI_API_KEY or --api-key) but the skill metadata does not declare any required environment variables or primary credential. SKILL.md also expects the 'uv' binary to be present but the registry lists no required binaries. These omissions are an incoherence that could mislead users about what secrets/integations are needed.✓Persistence & PrivilegeThe skill does not request always:true and does not modify other skills or global settings. It writes generated images to the current working directory (expected behavior) but has no extra persistence or elevated privileges beyond normal file writes.What to consider before installingThis skill'…