Ad Designer

PassAudited by ClawScan on May 1, 2026.

Overview

The skill appears to do what it advertises—generate marketing ad images—but it relies on an external Gemini image service/API key and a separate helper skill that users should verify.

This skill looks coherent and purpose-aligned. Before installing, make sure you trust the separate nano-banana-pro dependency, use a limited Gemini API key, and only provide campaign or brand files that you are comfortable using with an external image generation service.

Findings (3)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

Using the skill may consume the user's Gemini quota or billable API access.

Why it was flagged

The skill requires access to a Gemini API key to use the image generation service. This is expected for the stated purpose, but it is still account-level credential use.

Skill content
test -n "$GEMINI_API_KEY" ... If `GEMINI_API_KEY` is unset: tell the user to export it from Google AI Studio.
Recommendation

Use a dedicated Gemini API key with appropriate limits, avoid pasting the key into conversation text, and revoke or rotate it if no longer needed.

What this means

The safety of image generation depends partly on tools installed outside this skill.

Why it was flagged

The skill depends on a remote installer for uv and a separate nano-banana-pro skill script that is not part of this artifact set. The setup is user-directed and related to image generation, but dependency provenance matters.

Skill content
If `uv` is missing: tell the user to install it with `curl -LsSf https://astral.sh/uv/install.sh | sh`. ... `~/.codex/skills/nano-banana-pro/scripts/generate_image.py`
Recommendation

Verify the uv installer source and review/install the nano-banana-pro skill from a trusted source before using this skill.

What this means

Brand style and campaign details may be included in prompts sent to the image generation service.

Why it was flagged

The workflow uses local campaign and brand context to construct prompts for an upstream image generation engine. This is disclosed and purpose-aligned, but it is a data flow to an external/provider-backed generator.

Skill content
Creative brief(s) ... `/tmp/marketing/campaigns/<brand>-campaign-plan.json` ... Brand bible ... `/tmp/marketing/brands/<brand>/brand-bible.md` ... `nano-banana-pro` — image generation engine
Recommendation

Avoid using confidential campaign or brand material unless the provider's data handling terms are acceptable for that content.