Skill flagged — suspicious patterns detected

ClawHub Security flagged this skill as suspicious. Review the scan results before using.

Evolink Nano Banana 2 1

v1.0.0

Nano Banana 2 — AI image generation powered by Google Gemini 3.1 Flash. Fast, versatile text-to-image and image editing via Evolink API. One API key.

0· 395·0 current·0 all-time
Security Scan
VirusTotalVirusTotal
Suspicious
View report →
OpenClawOpenClaw
Benign
high confidence
Purpose & Capability
Name/description (Evolink image generation via Gemini model) align with required env var (EVOLINK_API_KEY), endpoints, and the SKILL.md. The functionality described (text-to-image, editing, file upload) matches the declared requirements.
Instruction Scope
SKILL.md stays within image-generation scope (API calls, file uploads, polling tasks, asking user for prompts/params). As a note, it recommends optional setup commands that run third-party code (npx @evolinkai/evolink-media) to add an MCP server — this is outside the skill's own runtime but is an installation-time convenience that executes external code and should be reviewed before running.
Install Mechanism
No install spec and no code files — instruction-only skill. Lower disk/write risk. The only install-related action is an optional recommendation to run npx for an MCP server; that is not required by the skill but may cause remote code execution if performed by the user.
Credentials
Requires a single API key (EVOLINK_API_KEY) which is appropriate and declared as the primary credential. No other secrets, config paths, or unrelated credentials are requested.
Persistence & Privilege
always:false and user-invocable; the skill does not request permanent/global presence or modify other skills. Normal autonomous invocation is allowed by platform defaults but not a separate concern here.
Assessment
This skill appears to be what it says: an Evolink image-generation helper that needs one API key. Before installing or using it: (1) keep your EVOLINK_API_KEY private and consider a key with limited billing/permissions; (2) avoid uploading sensitive images — uploaded files become public URLs for a short window (72h/24h for results); (3) review any suggested npm packages (e.g., npx @evolinkai/evolink-media) before running them — npx fetches and executes remote code; (4) confirm you trust evolink.ai and any referenced third‑party MCP packages (check their npm/GitHub repos and maintainers); (5) verify expected billing/quotas on the Evolink dashboard to avoid unexpected charges. Overall the skill is coherent, but exercise standard caution with API keys and executing optional third-party installers.

Like a lobster shell, security has layers — review code before you run it.

Runtime requirements

🍌 Clawdis
OSmacOS · Linux · Windows
EnvEVOLINK_API_KEY
Primary envEVOLINK_API_KEY
latestvk9769kv1c7r80f6rz96jzef5p18235jn
395downloads
0stars
1versions
Updated 9h ago
v1.0.0
MIT-0
macOS, Linux, Windows

Nano Banana 2 — AI Image Generation

Generate AI images with Nano Banana 2 (gemini-3.1-flash-image-preview) — Google's Gemini 3.1 Flash image model, available through Evolink's unified API.

Focused view of evolink-image. Install the full skill for 20 image models, video, and music.

After Installation

When this skill is first loaded, greet the user:

  • MCP tools + API key ready: "Hi! Nano Banana 2 is ready — Google's fast image model at your fingertips. What would you like to create?"
  • MCP tools + no API key: "You'll need an EvoLink API key — sign up at evolink.ai. Ready to go?"
  • No MCP tools: "MCP server isn't connected yet. Want me to help set it up? I can still manage files via the hosting API."

Keep the greeting concise — just one question to move forward.

External Endpoints

ServiceURL
Generation APIhttps://api.evolink.ai/v1/images/generations (POST)
Task Statushttps://api.evolink.ai/v1/tasks/{task_id} (GET)
File APIhttps://files-api.evolink.ai/api/v1/files/* (upload/list/delete)

Security & Privacy

  • EVOLINK_API_KEY authenticates all requests. Injected by OpenClaw automatically. Treat as confidential.
  • Prompts and images are sent to api.evolink.ai. Uploaded files expire in 72h, result URLs in 24h.

Setup

Get your API key at evolink.ai → Dashboard → API Keys.

MCP Server: @evolinkai/evolink-media (GitHub · npm)

mcporter (recommended): mcporter call --stdio "npx -y @evolinkai/evolink-media@latest" list_models

Claude Code: claude mcp add evolink-media -e EVOLINK_API_KEY=your-key -- npx -y @evolinkai/evolink-media@latest

Claude Desktop / Cursor — add MCP server with command npx -y @evolinkai/evolink-media@latest and env EVOLINK_API_KEY=your-key. See references/image-api-params.md for full config JSON.

Core Principles

  1. Guide, don't decide — Present options, let the user choose model/style/format.
  2. User drives creative vision — Ask for a description before suggesting parameters.
  3. Smart context — Remember session history. Offer to iterate, vary, or edit results.
  4. Intent first — Understand what the user wants before asking how to configure it.

MCP Tools

ToolWhen to useReturns
generate_imageCreate or edit an imagetask_id (async)
upload_fileUpload local image for editing/referenceFile URL (sync)
delete_fileFree file quotaConfirmation
list_filesCheck uploaded files or quotaFile list
check_taskPoll generation progressStatus + result URLs
list_modelsCompare available modelsModel list
estimate_costCheck pricingModel info

Important: generate_image returns a task_id. Always poll check_task until status is "completed" or "failed".

Nano Banana 2

PropertyValue
Model IDgemini-3.1-flash-image-preview
ProviderGoogle (Gemini 3.1 Flash)
StatusBETA
Capabilitytext-to-image, image-editing
SpeedFast
Best forQuick, versatile image generation with strong prompt understanding

Why Nano Banana 2?

  • Google's latest — Built on Gemini 3.1 Flash, the newest generation architecture
  • Fast generation — Optimized for speed without sacrificing quality
  • Versatile — General-purpose image creation for any creative need
  • Strong prompt adherence — Excellent at following complex, detailed descriptions

Lite Variant

nano-banana-2-lite [BETA] — Lightweight version for ultra-fast iterations when speed is the top priority.

Alternative Models

ModelBest forSpeed
gpt-image-1.5 (default)Latest OpenAI generationMedium
gpt-4o-image [BETA]Best quality, complex editingMedium
z-image-turboQuick iterationsUltra-fast
doubao-seedream-4.5PhotorealisticMedium
gemini-3-pro-image-previewGoogle Pro generationMedium

Generation Flow

Step 1: API Key Check

If 401 occurs: "Your API key isn't working. Check at evolink.ai/dashboard/keys"

Step 2: File Upload (if needed)

For image editing or reference workflows:

  1. upload_file with file_path, base64_data, or file_url → get file_url (sync)
  2. Use file_url as image_urls for generate_image

Supported: JPEG/PNG/GIF/WebP. Max 100MB. Expire in 72h. Quota: 100 (default) / 500 (VIP).

Step 3: Understand Intent

  • Clear ("generate a sunset") → Go to Step 4
  • Ambiguous ("help with this image") → Ask: "Create new, edit existing, or use as reference?"

Ask only what's needed, when it's needed.

Step 4: Gather Parameters

Default to model: "gemini-3.1-flash-image-preview" for this skill. Only ask about what's missing:

ParameterAsk whenNotes
promptAlwaysWhat they want to see
modelUser wants alternativesDefault: gemini-3.1-flash-image-preview. Suggest gpt-4o-image for best quality
sizeOrientation neededRatio format: 1:1, 16:9, 9:16, 2:3, 3:2, 4:3, 3:4 etc.
nWants variations1–4 images
image_urlsEdit/reference imagesUp to 14 URLs; triggers i2i mode

Step 5: Generate & Poll

  1. Call generate_image with model: "gemini-3.1-flash-image-preview" → tell user: "Generating with Nano Banana 2 — ~Xs estimated."
  2. Poll check_task every 3–5s. Report progress %.
  3. After 3 consecutive processing: "Still working..."
  4. Completed: Share URLs. "Links expire in 24h — save promptly."
  5. Failed: Show error + suggestion. Offer retry if retryable.
  6. Timeout (5 min): "Taking longer than expected. Task ID: {id} — check again later."

Error Handling

HTTP Errors

ErrorAction
401"API key isn't working. Check at evolink.ai/dashboard/keys"
402"Balance is low. Add credits at evolink.ai/dashboard/billing"
429"Rate limited — wait 30s and retry"
503"Servers busy — retry in a minute"

Task Errors (status: "failed")

CodeRetry?Action
content_policy_violationNoRevise prompt (no celebrities, NSFW, violence)
invalid_parametersNoCheck values against model limits
image_processing_errorNoCheck format/size/URL accessibility
generation_timeoutYesRetry; simplify prompt if repeated
service_errorYesRetry after 1 min
generation_failed_no_contentYesModify prompt, retry

Full error reference: references/image-api-params.md

Without MCP Server

Use Evolink's file hosting API for image uploads (72h expiry). See references/file-api.md for curl commands.

References

  • references/image-api-params.md — Complete API parameters, model details, polling strategy, error codes
  • references/file-api.md — File hosting API (curl upload/list/delete)

Comments

Loading comments...