Unsanitized user input enables command injection, path
Claims to do
Nano Banana Pro Image Generation & Editing: Generate new images or edit existing ones using Google's Nano Banana Pro API (Gemini 3 Pro Image).
Actually does
This skill executes a Python script via `uv run` to interact with the Google Nano Banana Pro API (Gemini 3 Pro Image). It takes a text prompt, an optional input image file, and an API key (from argument or `GEMINI_API_KEY` env var). It saves the generated or edited image as a PNG file to the user's current working directory.
openclaw skills install steipete/nano-banana-proThe skill executes a Python script via `uv run` with arguments (`--filename`, `--input-image`) that are derived from user input. Without proper sanitization within the `generate_image.py` script, this could lead to path traversal for arbitrary file writes/reads or command injection.
uv run ~/.codex/skills/nano-banana-pro/scripts/generate_image.py --prompt "..." --filename "output-name.png" --input-image "path/to/input.png"
The preflight check `test -f "path/to/input.png"` allows checking for the existence of arbitrary files on the system if the `path/to/input.png` argument is fully user-controlled.
test -f \"path/to/input.png\"
[](https://mondoo.com/ai-agent-security/skills/clawhub/steipete/nano-banana-pro)<a href="https://mondoo.com/ai-agent-security/skills/clawhub/steipete/nano-banana-pro"><img src="https://mondoo.com/ai-agent-security/api/badge/clawhub/steipete/nano-banana-pro.svg" alt="Mondoo Skill Check" /></a>https://mondoo.com/ai-agent-security/api/badge/clawhub/steipete/nano-banana-pro.svgSkills can read files, run commands, and access credentials. Mondoo helps organizations manage the security risks of AI agent skills across their entire fleet.