mo-nano-banana-pro

SUSPICIOUS: The skill's stated purpose is coherent with image generation, and the likely intended data flow to Google's Gemini API is proportionate. However, execution depends on an opaque local shell script that can receive raw API keys and local files, so install/execution trust and credential handling cannot be fully verified from the skill alone.