YouTube Thumbnail Generator with Nano Banana
v0.1.1Create high-converting YouTube thumbnail concepts, overlay text, image prompts, and optional AI-generated cover images from raw titles, hooks, scripts, or ma...
⭐ 1· 229·0 current·0 all-time
byMagiclight@luo-2q
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
Name/description match the implementation: scripts build a thumbnail plan with a Gemini text model and optionally call Gemini's image endpoint. Requested binaries (python3) and environment variables (GEMINI_API_KEY / GOOGLE_API_KEY) are appropriate and expected for this functionality.
Instruction Scope
SKILL.md instructs the agent to analyze input copy, build prompts, and optionally call local scripts that POST to Google's generativelanguage endpoint. The instructions reference only the provided scripts, output paths under outputs/, and the declared API keys — they do not instruct reading unrelated system files or other credentials.
Install Mechanism
There is no external install spec (instruction-only / local scripts), so nothing is downloaded from remote URLs. The included Python scripts are self-contained and use only the standard library for network calls; no third-party package installs or external archives are pulled.
Credentials
Only GEMINI_API_KEY (primary) or GOOGLE_API_KEY are required and are used to authenticate with Google's generativelanguage API. No unrelated secrets or many credentials are requested. The credential usage is proportional to the described purpose.
Persistence & Privilege
The skill is not forced always-on (always: false) and does not modify other skills or global agent settings. It writes outputs to local files under outputs/, which is expected behavior for a generator script.
Assessment
This package is internally consistent with its stated purpose, but review before running: (1) The scripts will send whatever you pass as copy to Google's generativelanguage API using your GEMINI_API_KEY/GOOGLE_API_KEY — avoid sending private or sensitive data. (2) Ensure the API key you provide has appropriate billing/usage controls and is stored securely. (3) The scripts write files to an outputs/ directory; run them in a workspace you control (or a sandbox) if you are cautious. (4) Run the included selftest (scripts/selftest.py) and inspect the scripts if you want to confirm behavior; the code is small and uses only standard library network calls to the official generativelanguage endpoint. (5) If you need tighter assurance, restrict the key scope, rotate keys after testing, or run the code in an isolated environment.Like a lobster shell, security has layers — review code before you run it.
image-generationvk972f5d4gyb1gj62ge8ptfbpm982hn86latestvk972f5d4gyb1gj62ge8ptfbpm982hn86prompt-generationvk972f5d4gyb1gj62ge8ptfbpm982hn86thumbnailvk972f5d4gyb1gj62ge8ptfbpm982hn86youtubevk972f5d4gyb1gj62ge8ptfbpm982hn86
License
MIT-0
Free to use, modify, and redistribute. No attribution required.
Runtime requirements
🖼️ Clawdis
Binspython3
EnvGEMINI_API_KEY, GOOGLE_API_KEY
Primary envGEMINI_API_KEY