Bananapro Image Gen

• Analyzed: May 15, 2026, 7:11 AM
• Findings: 1
• Version: 1.0.2
• Hash: 6f47e8abe34dc8debda3926efdf190b45a7abffbb518e91d008c18374b0acd0c
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill provides image generation via Gemini but strongly encourages users to route their API keys through a third-party proxy service (apipro.maynor1024.live). The script `scripts/generate_image.py` transmits the API key as a plaintext query parameter to the configured endpoint, which is a security risk. While the code performs its stated function, the promotion of an unofficial intermediary to handle sensitive credentials creates a high potential for credential harvesting.