Nano Banana Pro

• Verdict: Pass
• Confidence: High
• Analyzed: Feb 19, 2026, 8:34 PM
• Findings: 0
• Version: 1.0.0

Overview

The skill's code, runtime instructions, and requested credential line up with its stated purpose (calling Replicate to run google/nano-banana-pro and download the resulting image); nothing suggests hidden or unrelated access.

This skill appears to do what it says: it needs a valid REPLICATE_API_TOKEN to call the Replicate API and will download the generated image into the workspace. Before installing: (1) confirm REPLICATE_API_TOKEN is a token you control and has only the scopes you intend (rotate/revoke if unsure); (2) ensure you trust the model 'google/nano-banana-pro' (the description's 'Gemini 3 Pro' wording may be an alias); (3) be aware the script downloads files into the agent workspace and will send the image in chat per SKILL.md; (4) if you don't have the 'uv' runner, you can invoke the script directly with python. If you need higher assurance, ask the publisher for clarification on the Gemini/GNano naming and for a signed package or known homepage/source.