ClawHub
Back to skill

Security audit

Nano Banana Image T8

Security checks across malware telemetry and agentic risk

Overview

This is a disclosed Nano Banana image-generation helper that uses an external API and can store a local API key for reuse.

Install only if you trust the T8/Nano Banana provider. Use a dedicated, revocable API key, avoid sending private images or sensitive prompts, and delete ~/.whaleclaw/credentials/nano_banana_api_key.txt if you no longer want the key reused.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (3)

Vague Triggers

Medium
Confidence
84% confidence
Finding
The trigger list includes very broad phrases like '文生图', '图生图', and generic testing phrases that can match ordinary user requests unrelated to this specific external API skill. Because the skill can execute shell commands, call a remote service, and handle credentials, overbroad activation increases the chance of unintended invocation and accidental credential capture or external data transfer.

Missing User Warnings

Medium
Confidence
95% confidence
Finding
The skill instructs persistent storage of API keys in a local file and automatic reuse on future runs without a clear user-facing consent notice or retention policy. Credential persistence materially raises risk of unauthorized reuse, leakage to other local processes or users, and surprise access to a paid external service, especially since the skill is designed to auto-check saved keys later.

Missing User Warnings

Medium
Confidence
96% confidence
Finding
The script saves the API key to a predictable plaintext file in the user's home directory automatically after interactive entry, without explicit consent or a clear warning that credentials will be persisted. Although it attempts to restrict file permissions to 0600 on non-Windows systems, plaintext local storage still increases exposure to credential theft from local compromise, backups, sync tools, or shared environments.

VirusTotal

64/64 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

No suspicious patterns detected.