@steipete

Nano Banana Pro

Generate/edit images with Nano Banana Pro (Gemini 3 Pro Image). Use for image create/modify requests incl. edits. Supports text-to-image + image-to-image; 1K/2K/4K; use --input-image.

Current version
v1.0.1
395 10万All installs 1,853

SKILL.md

text/markdown · 5701 bytes

scripts/generate_image.py

text/plain · 5613 bytes

skill-card.md

text/markdown · 2194 bytes

Security Scan

Status

clean

Open VirusTotal

OpenClaw

gpt-5.5

clean

OpenClaw analysis

This skill does what it claims: it generates or edits images through Google Gemini, but users should avoid sending sensitive prompts or images.

Confidence: high

VirusTotal

Type: OpenClaw Skill Name: nano-banana-pro Version: 1.0.1 The `scripts/generate_image.py` script allows reading arbitrary local files specified via the `--input-image` argument using `PIL.Image.open()`. If the provided path points to a sensitive file (e.g., a screenshot of credentials, or a document containing PII) that PIL can successfully open, its content will be sent to the external Google Gemini API (`gemini-3-pro-image-preview`). While the stated purpose is image editing, this capability presents a significant data exfiltration risk if the agent is prompted to provide paths to sensitive files, even without explicit malicious intent from the skill developer.

Metadata

  • Owner: @steipete
  • Created: 2026/01/04
  • Updated: 2026/05/18
  • Versions: 2
  • Comments: 1
  • Scan checked at: 2026/05/27

Runtime

No runtime requirements are exposed in the official public payload.