nano-banana-pdf-edit

Edit PDF files visually using natural language with the nano-pdf CLI tool, powered by Google's Gemini 3 Pro Image (Nano Banana). Use this skill whenever the...

This skill appears coherent for visually editing PDFs, but be aware of these practical concerns before installing or using it: - Data exposure: The tool converts pages to images and sends them (and optionally the PDF text if you enable --use-context) to Google Gemini. Do not use it with sensitive or confidential PDFs unless you accept that data will be sent to Google's API and may be billed. - API key management: Provide a Gemini API key tied to a project with appropriate billing limits. Consider using a restricted/ephemeral key or project to limit blast radius and cost, and revoke it if you suspect misuse. - Verify packages/sources: The skill instructs you to pip install nano-pdf and references GitHub repos. Inspect the nano-pdf package source (PyPI/GitHub) and confirm the repository owner before installing to avoid installing a malicious package. - Test safely: Try the workflow on non-sensitive sample PDFs first to confirm results and costs. - Use options to limit leakage: Use --no-use-context if you do not want the agent to send the full document text as context, and prefer --disable-google-search if you want to avoid additional external lookups. If you want a stricter assessment, provide the exact nano-pdf package source (PyPI page or the GitHub repo contents) so I can inspect the code that will be installed and called.

Type: OpenClaw Skill Name: nano-banana-pdf-skill Version: 1.0.1 The skill is classified as suspicious due to the inherent risk of shell injection and broad execution capabilities. The `SKILL.md` instructs the AI agent to construct and execute `nano-pdf` shell commands based on user input, which presents a vulnerability if user input is not rigorously sanitized or quoted, potentially leading to arbitrary command execution. Additionally, the agent is instructed to install system-level dependencies (`pip install`, `brew install`, `apt-get install`), granting it broad permissions to modify the system, which could be exploited if the agent's command generation is compromised by a malicious prompt.