Nano Banana 2 — Gemini Image Generation

Gemini image generation, editing, and search-grounded image creation via gemini-3.1-flash-image-preview (Nano Banana 2). USE FOR: - Generating images from te...

This skill appears to be what it says (a Gemini image-generation helper) and uses the Google generativelanguage API. Before installing or using it: (1) confirm the registry metadata is updated to declare GEMINI_API_KEY so you know what credentials the skill needs; (2) do not hardcode the key into files you will commit — prefer an ephemeral session env or a secrets manager; if you must use ~/.zshrc or a .env file, add the file to .gitignore and understand the persistence risk; (3) verify the skill's owner/source (source/homepage are unknown here) — if you don't trust the publisher, don't supply high-privilege keys; (4) review billing/quota on your Google AI Studio project because image generation can incur charges. If you want a lower-risk approach, run the provided example code manually in an isolated environment rather than enabling any automatic invocation.

Type: OpenClaw Skill Name: nano-banana-2-gemini Version: 0.1.0 The skill is classified as suspicious due to overly permissive `allowed-tools` in `SKILL.md`, specifically `Bash(curl *)` and `Bash(python3 *)`. While the provided Python scripts and instructions are benign and interact with the legitimate Gemini API, these broad permissions create a significant prompt injection vulnerability. An attacker could craft a malicious prompt to the agent, leveraging these tools for arbitrary shell command execution, data exfiltration, or other unauthorized actions, despite the skill's own code not demonstrating malicious intent.