Nano Banana Skill

Nano Banana, Nano Banana Pro, Nano Banana 2 - Google AI image generation models for AI agents. Ultra-high character consistency, 1K-4K resolution, up to 14 r...

This skill is essentially documentation and curl/JS examples for the monet.vision image API and only needs your MONET_API_KEY. Before installing: (1) Verify monet.vision is the legitimate service you expect and that the 'Google/Gemini' branding is accurate for your use-case. (2) Only provide a MONET_API_KEY that you are comfortable giving to this skill (treat it like any API secret); consider creating a scoped/test key if possible. (3) Be aware uploaded reference images may be sent to the service — check Monet's privacy/retention and copyright policies (README states uploaded files are stored 24 hours). (4) Confirm billing/costs for high-resolution outputs and idempotent task behavior. If you need higher assurance, ask the skill author/owner for an official homepage or documentation URL and confirm the relationship to Monet AI.

Type: OpenClaw Skill Name: nano-banana-skill Version: 1.0.0 The skill includes a file upload capability (`curl -F "file=@/path/to/your/image.jpg"`) documented in both SKILL.md and README.md. While intended for uploading reference images to monet.vision, this feature presents a significant vulnerability. If an AI agent's input for the file path is not strictly controlled or sanitized, a malicious prompt could instruct the agent to upload arbitrary local files (e.g., `/etc/passwd`, `~/.ssh/id_rsa`), leading to data exfiltration. This is a risky capability that could be exploited, classifying it as suspicious rather than benign, as it enables a potential attack vector against the agent's host system.