wangyi-banana2

Generate images and videos via WangYi Banana API (nano-banana, SORA2). Supports text-to-image, image-to-image, text-to-video, image-to-video, and character c...

This skill appears to do what it claims (image/video generation) and includes a runnable script, but there are a few things to consider before installing: - Do NOT paste your private API key into an untrusted chat. The docs explicitly suggest providing the API key in conversation; prefer setting the WANGYI_API_KEY environment variable or placing it in your own ~/.openclaw/openclaw.json only after you review the script. - Review scripts/wangyi-banana.py yourself (it will POST files and data to the service host). Confirm you are comfortable with the host (https://ai.t8star.cn). The install docs list backup hosts and a raw IP; the script appears to use only the main host, but those alternate addresses are present in documentation and affiliate links—treat them with caution. - If you have sensitive files, avoid passing arbitrary filesystem paths to the skill unless you understand the exact API call being made (image-to-video/image-to-image will upload the provided files to the remote API). - If you want extra safety, run the script in an isolated environment/container or inspect/modify it to restrict allowable upload paths and endpoints before use. If you want, I can: (1) summarize the script's network calls and where it uploads data, (2) search the full script for any unexpected endpoints or data exfiltration patterns, or (3) suggest a safer configuration workflow to avoid pasting secrets in chat.

Type: OpenClaw Skill Name: wangyi-banana2 Version: 1.0.0 The skill bundle is a functional wrapper for the WangYi Banana (T8/Zhenzhen Workshop) image and video generation API. While the documentation (install.md) contains promotional content and affiliate links for the service, the underlying Python script (wangyi-banana.py) follows standard practices for API interaction and file handling within the OpenClaw ecosystem. It uses curl for network requests and restricts file operations to expected directories, with no evidence of data exfiltration, malicious execution, or harmful prompt injection.