Nano Banana Skill

AdvisoryAudited by Static analysis on Apr 30, 2026.

Overview

No suspicious patterns detected.

Findings (0)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

Using the skill may consume the user's Monet account quota or billing credits when image-generation tasks are created.

Why it was flagged

The skill requires a Monet API key to authenticate requests. This is expected for the stated API integration, but it gives the agent access to the user's Monet account for task creation.

Skill content
requires:\n      env:\n        - MONET_API_KEY # Required: API key from monet.vision
Recommendation

Use a dedicated or least-privileged API key if available, keep it out of source code, and revoke or rotate it if the skill is no longer needed.

What this means

The agent can create generation jobs when invoked, which may use paid service capacity or create account history on monet.vision.

Why it was flagged

The documented workflow creates external asynchronous image-generation tasks. This is central to the skill, but it is an action on a third-party service rather than a purely local operation.

Skill content
curl -X POST https://monet.vision/api/v1/tasks/async ... "type": "image" ... "idempotency_key": "unique-key-123"
Recommendation

Install only if you want the agent to create Monet image-generation tasks, and review prompts and generation requests before submitting sensitive or costly jobs.

What this means

Reference images or other uploaded files may be stored temporarily by the provider and could contain private or identifying content.

Why it was flagged

The skill documents uploading user files to the external Monet service, with a stated 24-hour retention period. This is disclosed and relevant to image generation, but it moves user content outside the local environment.

Skill content
POST `/api/v1/files` ... Upload a file to get an online access URL. ... Uploaded files are stored for **24 hours**
Recommendation

Avoid uploading confidential images or personal data unless you are comfortable with Monet's storage and terms; review the provider's privacy policy before use.