Poyo Nano Banana

• Outcome: Pass
• Latest audit: Jul 10, 2026 · 1:27 AM UTC
• Version: 1.0.1

Overview

This skill is a straightforward PoYo image generation/editing integration that sends user-provided prompts and optional image URLs to the disclosed PoYo API.

Install only if you are comfortable sending prompts, callback URLs, and any referenced image URLs to PoYo. Prefer using POYO_API_KEY from the environment rather than passing it on the command line, and avoid submitting confidential, regulated, or private images unless that external processing is acceptable.

SkillSpector

By NVIDIA

Vulnerability Patterns

• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access
• Supply Chain: Unpinned Dependencies, External Script Fetching, Obfuscated Code
• Excessive Agency: Unrestricted Tool Access, Autonomous Decision Making, Scope Creep

Findings (5)

Missing User Warnings

Medium

• Confidence: 93% confidence
• Finding: The skill explicitly instructs sending user prompts and potentially reference image URLs to a third-party API, but it does not tell the operator to obtain user consent or warn that content leaves the local system. This can cause unintended disclosure of sensitive prompts, image links, or embedded private data to an external service.

Missing User Warnings

Low

• Confidence: 88% confidence
• Finding: The skill requires a bearer API key but provides no guidance on safe credential handling, such as avoiding logging, echoing, or embedding the key in generated examples. While not an immediate exploit by itself, this omission increases the chance of accidental credential exposure during use or debugging.

Missing User Warnings

Low

• Confidence: 94% confidence
• Finding: The reference explicitly instructs users to send prompts and optional image URLs to a third-party API, but it does not warn that user content may leave the local system and be processed by an external provider. In a skill context, this can create an unnoticed privacy and data-handling risk, especially if prompts or referenced images contain sensitive or proprietary information.

External Transmission

Medium

• Category: Data Exfiltration

Content

---
name: poyo-nano-banana
description: Use PoYo AI Nano Banana for general image generation and image editing across many aspect ratios through the `https://api.poyo.ai/api/generate/submit` endpoint. Use when a user wants prompt-based images, reference-image edits, wide or tall canvases, or PoYo payloads for `nano-banana` and `nano-banana-edit`.
metadata: {"openclaw": {"homepage":"https://poyo.ai/models/nano-banana-api", "requires": {"bins": ["curl"], "env": ["POYO_API_KEY"]}, "primaryEnv": "POYO_API_KEY"}}
---

• Confidence: 86% confidence
• Finding: https://api.poyo.ai/

External Transmission

Medium

• Category: Data Exfiltration

Content

## Quick workflow

1. Choose the right model id for the requested output.
2. Build the request body for `POST https://api.poyo.ai/api/generate/submit`.
3. Send Bearer-authenticated JSON with `Authorization: Bearer <POYO_API_KEY>`.
4. Save the returned `task_id`.
5. Poll unified task status or wait for `callback_url` notifications.

• Confidence: 91% confidence
• Finding: https://api.poyo.ai/

VirusTotal

63/63 vendors flagged this skill as clean.

Static analysis

No suspicious patterns detected.