Nano Banana 2 FAL
v1.0.0Generate or edit images via Gemini 3 Pro Image (Nano Banana Pro).
⭐ 0· 258·0 current·0 all-time
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
Name/description match the bundled Python script which calls the Google genai client (model 'gemini-3-pro-image-preview') and accepts image input(s) and a prompt. The required binary 'uv' is used in SKILL.md to execute the script, and GEMINI_API_KEY is the only credential needed — all of which are coherent with an image-generation skill.
Instruction Scope
SKILL.md only instructs running the included script via 'uv' and to provide a prompt, filename, optional input images, and resolution. The script reads only provided input image file paths and the GEMINI API key (or an explicit --api-key), uploads/requests generation via the GenAI client, saves the returned image locally, and prints a MEDIA token. There are no instructions to read unrelated files, harvest other environment variables, or send data to unexpected endpoints.
Install Mechanism
Install spec uses brew to install a formula named 'uv' and declares it will create a 'uv' binary. Using Homebrew is a normal distribution path; this is not an arbitrary URL download. If you are unfamiliar with the 'uv' formula on your platform, confirm the formula source/tap before installing. The Python dependencies (google-genai, pillow) are declared in the script header but not managed by the brew install — ensure your environment or uv run will install/resolve them.
Credentials
Only GEMINI_API_KEY is required (and an optional --api-key argument). That single credential is appropriate and necessary for calling Google's Gemini/GenAI API. The script does not request other unrelated secrets or config paths.
Persistence & Privilege
The skill is not always-enabled and uses the platform default (agent can invoke it autonomously). It does not modify other skills or system-wide configuration and does not request persistent privileges beyond its own runtime.
Assessment
This skill is internally consistent: it legitimately needs GEMINI_API_KEY and the 'uv' runner to execute the bundled Python script which calls Google's genai library. Before installing, verify the source of the 'uv' Homebrew formula on your machine (so you know what will be installed), ensure your Python environment will provide google-genai and pillow (or that 'uv run' will handle deps), and supply a Gemini API key with appropriate, minimal permissions (rotate or limit the key if possible). Also be mindful that the script will read any input image files you pass to it — do not feed sensitive images you don't want transmitted to the Gemini API. If you want higher assurance, run the script locally after review rather than granting broad automated access to the skill.Like a lobster shell, security has layers — review code before you run it.
latestvk97bhtef6ztsv711g98df4teh182mtm5
License
MIT-0
Free to use, modify, and redistribute. No attribution required.
Runtime requirements
🍌 Clawdis
Binsuv
EnvGEMINI_API_KEY
Primary envGEMINI_API_KEY
Install
Install uv (brew)
Bins: uv
brew install uv