Nano Banana Pro Image Generation&Editing

PassAudited by ClawScan on May 1, 2026.

Overview

The skill appears purpose-aligned for Atlas Cloud image generation/editing, with disclosed use of an API key and prompt/image data sent to Atlas Cloud.

This looks reasonable for an Atlas Cloud image-generation skill. Before installing, be comfortable sharing prompts and images with Atlas Cloud, understand that requests may use paid API credits, and avoid uploading confidential images unless you trust the provider's handling of that data.

Findings (3)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

Image generation or editing requests may consume the user's Atlas Cloud credits or billing quota.

Why it was flagged

The skill requires an Atlas Cloud API key, which is expected for the service integration but gives the skill authority to use the user's provider account.

Skill content
Required env vars: ATLASCLOUD_API_KEY ... Primary credential: ATLASCLOUD_API_KEY
Recommendation

Use a dedicated Atlas Cloud API key if possible, monitor usage, and revoke or rotate the key if you stop using the skill.

What this means

Prompts, image URLs, and uploaded image data may leave the local environment and be processed by Atlas Cloud.

Why it was flagged

The skill discloses that prompts and image content are transmitted to an external provider, which is central to the image-generation purpose but relevant for privacy.

Skill content
This skill sends text prompts and image URLs/data to Atlas Cloud API for image generation.
Recommendation

Avoid sending confidential, private, or rights-sensitive images or prompts unless Atlas Cloud's terms and retention practices are acceptable to you.

What this means

If used carelessly, a local image file could be uploaded without an interactive confirmation prompt.

Why it was flagged

The helper script supports an explicit upload command with an option to skip confirmation; this is purpose-aligned, but users should ensure only intended local files are uploaded.

Skill content
up.add_argument("--yes", "-y", action="store_true", help="Skip upload confirmation prompt"
Recommendation

Do not use the confirmation-skipping flag for sensitive files, and verify the file path before uploading.