Security audit
Nano Banana
Security checks across malware telemetry and agentic risk
Overview
This skill is a disclosed image-generation helper that rewrites prompts and calls a local image-generation wrapper, with no evidence of hidden persistence, credential theft, or destructive behavior.
Reasonable to install if you trust the local OpenClaw core media helper and are comfortable sending image prompts to the generation provider. Avoid putting secrets, confidential business details, or sensitive personal data into prompts.
SkillSpector
By NVIDIA
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
VirusTotal
64/64 vendors flagged this skill as clean.
Static analysis
No suspicious patterns detected.