ClawHub

Google Gemini Media

v1.0.1

Use the Gemini API (Nano Banana image generation, Veo video, Gemini TTS speech and audio understanding) to deliver end-to-end multimodal media workflows and code templates for "generation + understanding".

⭐ 6· 3.5k·20 current·20 all-time
by@xsir0
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Suspicious
medium confidence
✓
Purpose & Capability
The SKILL.md content clearly implements Google Gemini image/video/audio generation and understanding workflows that align with the skill name/description. The operations and examples (Node.js SDK and REST) are consistent with the stated capability.
✓
Instruction Scope
Runtime instructions stay within the Gemini API domain: they show how to call generativelanguage.googleapis.com, upload files, handle inline vs Files API, and save media locally. The instructions do not instruct reading arbitrary system files or contacting unrelated third-party endpoints.
ℹ
Install Mechanism
This is instruction-only (no install spec or code files). The SKILL.md recommends npm install @google/genai and Node.js 18+, but no install is provided in the metadata. Instruction-only reduces installation risk, but the missing install spec means users must run package installs themselves — verify packages come from official registries.
!
Credentials
The skill runtime explicitly requires an API key via GEMINI_API_KEY (SKILL.md section 3.1) and uses x-goog-api-key in REST examples, but the registry metadata lists no required env vars and no primary credential. That metadata omission is an inconsistency that could lead to accidental credential use or misconfiguration. The GEMINI_API_KEY request itself is proportionate to the skill, but the metadata should declare it.
✓
Persistence & Privilege
The skill is not always-included and uses normal autonomous invocation. It does not request system-level persistence, modify other skills, or require unusual privileges.
What to consider before installing
This Skill appears to be a legitimate how-to for Google Gemini media APIs, but exercise caution before installing or running it directly: - Metadata mismatch: SKILL.md requires GEMINI_API_KEY, but the skill registry metadata does not declare any required env vars/primary credential. Confirm the skill author and ask them to update metadata to declare GEMINI_API_KEY before use. - Source provenance: there is no homepage or source repo listed. Prefer skills with a verifiable source (GitHub/org page) so you can audit the exact code/templates you will run. - Credential hygiene: if you provide an API key, use a scoped/limited key (and rotate it), or a test project key with minimal quota. Do not use long-lived, multi-service keys. - Installation: SKILL.md recommends npm install @google/genai; if you follow that, ensure you fetch the official package from npm and inspect package.json/README for authenticity. - Network effects: the skill will call Google endpoints and may upload media. Do not feed sensitive/private media until you understand how the Files API is used and what Google project/account receives the uploads. If you want to proceed: ask the publisher for source code or a homepage, insist they add GEMINI_API_KEY to required env metadata, and test in an isolated environment with a limited API key first.

Like a lobster shell, security has layers — review code before you run it.

latestvk976wnk6anesnk8fbpp02x75fd802tf0

License

MIT-0
Free to use, modify, and redistribute. No attribution required.
Termshttps://spdx.org/licenses/MIT-0.html

Comments