@steipete

Nano Banana Pro

Generate/edit images with Nano Banana Pro (Gemini 3 Pro Image). Use for image create/modify requests incl. edits. Supports text-to-image + image-to-image; 1K/2K/4K; use --input-image.

Current version
v1.0.1
335 8.5万All installs 1,760

v1.0.1

2026/01/05

Version

No changelog provided.

Security Scan

Status

suspicious

Open VirusTotal

OpenClaw

gpt-5-mini

suspicious

OpenClaw analysis

The skill appears to implement an image-generation tool for Gemini as described, but the registry metadata omits required items (an API key and the 'uv' runner) and there are small inconsistencies that you should resolve before trusting it.

Confidence: medium

VirusTotal

Type: OpenClaw Skill Name: nano-banana-pro Version: 1.0.1 The `scripts/generate_image.py` script allows reading arbitrary local files specified via the `--input-image` argument using `PIL.Image.open()`. If the provided path points to a sensitive file (e.g., a screenshot of credentials, or a document containing PII) that PIL can successfully open, its content will be sent to the external Google Gemini API (`gemini-3-pro-image-preview`). While the stated purpose is image editing, this capability presents a significant data exfiltration risk if the agent is prompted to provide paths to sensitive files, even without explicit malicious intent from the skill developer.

Metadata

  • Owner: @steipete
  • Created: 2026/01/04
  • Updated: 2026/04/14
  • Versions: 2
  • Comments: 1
  • Scan checked at: 2026/02/11

Runtime

No runtime requirements are exposed in the official public payload.

Nano Banana Pro | ClawHub CN