Nano Banana 2 Image Generation&Editing

PassAudited by ClawScan on May 1, 2026.

Overview

This is a coherent image-generation/editing skill, but it requires provider API keys and sends prompts or images to Atlas Cloud or Google as part of its expected function.

Before installing, decide which provider you want to use and configure only that API key if possible. Avoid sending sensitive prompts or private images unless you accept the provider's handling of that data, and approve local image uploads only when they are necessary for the requested edit.

Findings (2)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

The agent can make image-generation requests against the configured provider account, which may incur usage or billing under that provider.

Why it was flagged

The skill needs third-party provider API credentials. This is expected for the stated purpose, but users should understand which account/key the agent can use.

Skill content
`ATLASCLOUD_API_KEY` | If using Atlas Cloud ... `GEMINI_API_KEY` | If using Google AI Studio ... At least one of the above must be set.
Recommendation

Provide only the API key for the provider you intend to use, prefer a limited or dedicated key if available, and monitor provider usage.

What this means

Sensitive text prompts or private images could be shared with the selected external provider during generation or editing.

Why it was flagged

Prompts and image files leave the local environment and are processed by external providers. The artifact discloses this behavior and ties it directly to the skill's image-generation/editing purpose.

Skill content
This skill sends text prompts and image data to third-party APIs (Atlas Cloud at `api.atlascloud.ai` or Google AI Studio at `generativelanguage.googleapis.com`) ... local files are uploaded to Atlas Cloud's temporary storage
Recommendation

Do not use confidential or private images unless you are comfortable sending them to the selected provider; confirm local file uploads before proceeding.