Nano Img Cli

Drives the local nano-img Gemini image CLI for image generation, model selection, saved defaults, reference-image workflows, and output sizing or format conv...

This skill is mostly a wrapper around a local CLI and local ~/.nano-img files, which is plausible. However: (1) the docs reference NANO_IMAGE_API_KEY and upstream Gemini API calls while the skill metadata lists no required env vars — confirm whether you must supply an API key before using it. (2) Verify where the nano-img/nanobana binaries come from (npm package name 'nanobana') and whether you trust that source before installing or running commands. (3) Review the contents of ~/.nano-img for any sensitive data before allowing the agent to read or modify those files. (4) If you want lower risk, run the CLI in an isolated environment (container or VM) or require the skill metadata to explicitly declare required env vars (e.g., NANO_IMAGE_API_KEY) and provide an audit of network endpoints used. If the author updates metadata to declare the API key requirement (or removes references to it), this assessment would likely move to benign.

Type: OpenClaw Skill Name: nano-img-cli Version: 1.0.1 The skill bundle provides a legitimate interface for the nano-img CLI tool, enabling an agent to generate images via the Gemini API and manage local configurations. The instructions in SKILL.md and the reference files (command-reference.md, defaults-and-files.md) are consistent with the stated purpose of image generation and CLI management. There are no indicators of malicious intent, data exfiltration, or unauthorized command execution.