ClawHub

Nano Banana Pro Custom

v1.0.1

Generate or edit images using OpenAI-compatible API. Supports multi-image input, fine-tuned models, and multiple configuration sources (env vars, openclaw.js...

⭐ 0· 101·1 current·1 all-time
by@chenxchen
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Benign
high confidence
✓
Purpose & Capability
Name/description (OpenAI-compatible image generation) match the declared env vars (NANO_API_KEY, NANO_BASE_URL, NANO_MODEL), required binary (uv) and the included Python script. Required dependencies (openai, pillow, requests) are proportionate to image-generation functionality.
✓
Instruction Scope
SKILL.md and the script limit behavior to: reading args/env/openclaw.json/skill config.json, loading image files, encoding them, and calling the configured image API. The config file paths the skill reads (~/.openclaw/openclaw.json and skill config.json) are declared in metadata and used by the script. No instructions tell the agent to read unrelated system files or exfiltrate data outside the configured base_url.
✓
Install Mechanism
There is no automated install spec; the skill is instruction-only with an included script. This is low-risk: nothing in the registry metadata downloads or executes external installers. Dependencies must be fulfilled by the environment (Python packages listed), which is expected.
✓
Credentials
Requested environment variables are limited to an API key, base URL, and model name — directly relevant to the stated purpose. The primary credential is NANO_API_KEY, which is appropriate. The script reads only these env vars and declared config files.
✓
Persistence & Privilege
always is false and the skill does not request system-wide changes or to modify other skills. It only reads its own config files and the user's ~/.openclaw/openclaw.json per its declared configPaths.
Assessment
This skill appears to do what it claims, but review these before installing or running: 1) The API key (NANO_API_KEY) and images you send will go to whatever base URL you configure — confirm NANO_BASE_URL points to a trusted provider. 2) The skill reads ~/.openclaw/openclaw.json and a local config.json where an API key can be stored; don't put sensitive keys in files you don't trust. 3) There is no automatic installer — you must provide the uv runtime and install Python deps (openai, pillow, requests) yourself. 4) Inspect scripts/generate_image.py (included) before use; if you point base_url at a third-party service, that service will receive your API key and image data. If you want to be extra cautious, run the script with a read-only or scoped API key and test against a trusted endpoint first.

Like a lobster shell, security has layers — review code before you run it.

latestvk970sgqspf0gqb104s2cn7772183ej59

License

MIT-0
Free to use, modify, and redistribute. No attribution required.
Termshttps://spdx.org/licenses/MIT-0.html

Runtime requirements

🍌 Clawdis
Binsuv
EnvNANO_API_KEY, NANO_BASE_URL, NANO_MODEL
Primary envNANO_API_KEY

Comments