NBP

AdvisoryAudited by Static analysis on Apr 30, 2026.

Overview

No suspicious patterns detected.

Findings (0)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

Note

ASI03: Identity and Privilege Abuse

What this means

The skill can consume quota or billable API usage for the Gemini account tied to the key.

Why it was flagged

The skill requires a Gemini API key to access Google's image API. This is purpose-aligned, but it is still delegated account/API authority and the registry metadata does not declare a primary credential.

Skill content

The script checks for API key in this order:
1. `--api-key` argument ...
2. `GEMINI_API_KEY` environment variable

Recommendation

Prefer setting GEMINI_API_KEY in the environment rather than pasting keys into chat or command arguments, and use a key with only the access needed.

Note

ASI07: Insecure Inter-Agent Communication

What this means

Private prompts or images provided for editing will leave the local machine and be processed by Google's API.

Why it was flagged

The prompt and, when editing, the selected input image are sent to Google's Gemini API. This provider data flow is expected for the stated purpose and is not hidden.

Skill content

response = client.models.generate_content(
            model="gemini-3-pro-image-preview",
            contents=contents,

Recommendation

Only use input images and prompts that you are comfortable sending to Google, and review the provider's data-use terms if the content is sensitive.

Note

ASI04: Agentic Supply Chain Vulnerabilities

What this means

Future runs may use newer dependency versions than the reviewer saw, which can change behavior or introduce supply-chain risk.

Why it was flagged

The script relies on runtime Python packages with lower-bound version constraints rather than pinned versions. This is common for uv scripts but means resolved package versions can change over time.

Skill content

dependencies = [
#     "google-genai>=1.0.0",
#     "pillow>=10.0.0",
# ]

Recommendation

Pin dependency versions or use a lockfile if reproducibility is important; users should install from trusted package indexes.

Note

ASI04: Agentic Supply Chain Vulnerabilities

What this means

Users may have less certainty about which package/version/source they are reviewing or installing.

Why it was flagged

The included metadata differs from the supplied registry metadata, which lists a different owner ID, slug, and version. This is a provenance inconsistency, not evidence of malicious behavior.

Skill content

"ownerId": "kn70pywhg0fyz996kpa8xj89s57yhv26",
  "slug": "nano-banana-pro",
  "version": "1.0.1"

Recommendation

Verify the package identity and installed path before use, especially because this skill handles an API key.