Nano Banana Pro Image Generation&Editing

AdvisoryAudited by Static analysis on Apr 30, 2026.

Overview

No suspicious patterns detected.

Findings (0)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

Image generation or editing requests may consume the user's Atlas Cloud credits or billing quota.

Why it was flagged

The skill requires an Atlas Cloud API key, which is expected for the service integration but gives the skill authority to use the user's provider account.

Skill content
Required env vars: ATLASCLOUD_API_KEY ... Primary credential: ATLASCLOUD_API_KEY
Recommendation

Use a dedicated Atlas Cloud API key if possible, monitor usage, and revoke or rotate the key if you stop using the skill.

What this means

Prompts, image URLs, and uploaded image data may leave the local environment and be processed by Atlas Cloud.

Why it was flagged

The skill discloses that prompts and image content are transmitted to an external provider, which is central to the image-generation purpose but relevant for privacy.

Skill content
This skill sends text prompts and image URLs/data to Atlas Cloud API for image generation.
Recommendation

Avoid sending confidential, private, or rights-sensitive images or prompts unless Atlas Cloud's terms and retention practices are acceptable to you.

What this means

If used carelessly, a local image file could be uploaded without an interactive confirmation prompt.

Why it was flagged

The helper script supports an explicit upload command with an option to skip confirmation; this is purpose-aligned, but users should ensure only intended local files are uploaded.

Skill content
up.add_argument("--yes", "-y", action="store_true", help="Skip upload confirmation prompt"
Recommendation

Do not use the confirmation-skipping flag for sensitive files, and verify the file path before uploading.