gemini-nano-banana

SUSPICIOUS: the skill's broad behavior mostly matches image-generation/OCR tooling, but its core data flow is inconsistent with a normal Gemini integration because all access is routed through a third-party gateway using a gateway-specific credential. The install sources look plausibly publisher-linked, so this is not confirmed malware, but credential forwarding and intermediary API routing materially raise risk.