nano-banana-pro

SUSPICIOUS: the stated purpose is coherent for an image-generation skill, and the requested API key/file inputs are proportionate. The main issue is that all meaningful execution and credential handling are delegated to an unseen local shell script, so install trust and actual data flow to official Google endpoints cannot be verified from the supplied skill alone.