nano-banana

SUSPICIOUS: the skill’s purpose is coherent, but it relies on third-party MCP packages installed via unpinned npx and forwards a Gemini API key into that code. The main concern is supply-chain and credential-forwarding risk, not confirmed malicious behavior; the documentation also appears to understate that generation flows to external Gemini services.