ClawHub

Nanobanana Plus

v1.5.3

Use nanobanana-plus over HTTP to generate images with per-call model switching and aspect ratio control. Best for OpenClaw / 小龙虾 users who have a running nan...

⭐ 0· 121·0 current·0 all-time
by@webkubor
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
Capability signals
Requires OAuth token
These labels describe what authority the skill may exercise. They are separate from suspicious or malicious moderation verdicts.
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Benign
high confidence
✓
Purpose & Capability
Name/description match the included files: the package is a Node CLI that sends HTTP requests to a nanobanana-plus service. Required binary (node) and the brew install of node are proportional and expected.
ℹ
Instruction Scope
Runtime instructions and the script stay within scope: they call health/models/generate endpoints on the configured base-url, accept an explicit --token (not read from env or disk), and write returned images to local files. Note: the script prints MEDIA: lines and file paths (intended for chat provider attachments), which could expose local file paths to integrated chat providers — this is documented in SKILL.md and appears intentional.
✓
Install Mechanism
Install spec is a single brew formula for node (official, expected). No downloads from untrusted URLs or archives; risk here is low and proportional to needing Node.js.
✓
Credentials
The skill declares no required environment variables or secrets. The script accepts an explicit --token parameter but does not persist it or read other environment variables or local config files — this is consistent with the stated design.
✓
Persistence & Privilege
Skill does not request permanent presence, does not modify other skills or system configs, and does not persist credentials to disk. It only writes generated image files to user-specified/current directories, which is expected behavior.
Assessment
This skill is a small CLI wrapper that expects a running nanobanana-plus HTTP service and Node.js. Before installing: ensure you trust the base URL you provide (the script will POST prompts and tokens there), pass private tokens only via --token (the skill intentionally does not persist them), and be aware generated images are saved to disk and the script prints file paths (MEDIA:...) which chat platforms may auto-attach. Also verify you want Homebrew to install Node on your system and that the GitHub project homepage matches what you expect.

Like a lobster shell, security has layers — review code before you run it.

latestvk973at18rewfrkxe5ez556ttsd84dcjn

License

MIT-0
Free to use, modify, and redistribute. No attribution required.
Termshttps://spdx.org/licenses/MIT-0.html

Runtime requirements

🍌 Clawdis
Binsnode

Install

Install Node.js (brew)
Bins: node
brew install node

Comments