Nano Banana Pro Enhanced

Generate or edit images via Gemini 3 Pro Image (Nano Banana Pro).

What to check before installing: 1) Confirm that you are comfortable with input images and (potentially sensitive) prompts being uploaded to Google's Gemini API — the script will call client.files.upload for edits. 2) Inspect and, if needed, change PENDING_JOBS_PATH in scripts/generate_image.py so pending-batch-jobs.json is stored inside a controlled skill directory (not four levels up into an ambiguous filesystem location). 3) Avoid following the SKILL.md advice to record detailed reasons for requests in HEARTBEAT.md (or ensure that file is in a private, ephemeral workspace) because it explicitly instructs the agent to persist human-readable context. 4) If you do not want persistent background checks, do not schedule cronjobs suggested by the SKILL.md; instead perform manual batch checks. 5) Verify how uv will install Python dependencies (google-genai, pillow) in your environment. If these concerns are addressed (pending-jobs path constrained, HEARTBEAT.md guidance removed or limited), the skill would be coherent with its purpose; as-is, treat it with caution.

Type: OpenClaw Skill Name: nano-banana-pro-enhanced Version: 1.0.1 The skill is suspicious due to multiple critical vulnerabilities. The `SKILL.md` contains prompt injection vectors, instructing the agent to write user-provided context into `HEARTBEAT.md` and to create cronjobs based on user requests, which could lead to arbitrary command execution or agent manipulation. Additionally, the `scripts/generate_image.py` script is vulnerable to path traversal via the `--filename`, `--batch-file`, and `--input-image` arguments, allowing for arbitrary file writes and reads outside the skill's intended directory.