nano-banana-2-imagegen

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 0.80). The skill explicitly accepts and resolves API keys from an inline --api-key flag or key files and even recommends a --dry-run that prints the resolved request payload, which can force the agent to include secret values verbatim in its output.