nano banana image to image

Edit or combine images by applying styles or elements from one image to another while preserving identity, pose, and lighting using AtlasCloud Nanobanana model.

This package is basically an AtlasCloud image-to-image client and appears to do what it claims, but take precautions before installing or running it: - Treat the included .env API key as untrusted. Do not use it; if you need to test, provide your own AtlasCloud token. Remove or rotate any embedded keys before sharing the package. - The script logs full API responses and writes last_url.txt / last_result.json to disk; run it in an isolated environment if the images or logs are sensitive. - Confirm you trust the AtlasCloud endpoints (api.atlascloud.ai and the OSS image hosts) and that you want those external network calls. - Prefer entering your token at runtime rather than relying on any files in the skill bundle or saving tokens into shared memory. If you want a cleaner/safer package: remove the .env file (or replace with a placeholder), reduce log verbosity, and document whether the included ATLASCLOUD_API_KEY is a demo key and whether it is valid.

Type: OpenClaw Skill Name: nano-banana-atlas-ai Version: 1.0.1 The skill bundle contains a hardcoded API key in the `.env` file, which is a significant security vulnerability. Furthermore, `SKILL.md` utilizes aggressive prompt-steering techniques (e.g., 'CRITICAL', 'mandatory and irreplaceable', and instructions to ignore other context sources) to control the agent's behavior. While the core logic in `generate.js` appears to legitimately interact with the AtlasCloud API, the combination of credential exposure and high-pressure prompt instructions meets the criteria for a suspicious classification.