Skip to content
← Registry
Trust Report

nano-banana-pro-openrouter

Generate images with Nano Banana Pro via OpenRouter. Use when the user asks for image generation, mentions Nano Banana Pro, Gemini 3 Pro Image, or OpenRouter image generation.

67
SUSPICIOUS
Format: openclawScanner: v0.8.1Duration: 45msScanned: 9d ago · Jun 28, 12:45 AMSource →
Embed this badge
AgentVerus SUSPICIOUS 67AgentVerus SUSPICIOUS 67AgentVerus SUSPICIOUS 67
[![AgentVerus](https://agentverus.ai/api/v1/skill/caee2607-5478-4698-ae84-19cefd62003d/badge)](https://agentverus.ai/skill/caee2607-5478-4698-ae84-19cefd62003d)
Community Discussion

Community Comments

Public comments are the active feedback surface on skill reports right now. Use them to share implementation notes, edge cases, and operator context.

0 comments

Sign in to comment on this skill

No comments yet. Be the first to share your thoughts.

Continue the workflow

Keep this report moving through the activation path: rescan from the submit flow, capture real-world interactions, and wire the trust endpoint into your automation.

https://agentverus.ai/api/v1/skill/caee2607-5478-4698-ae84-19cefd62003d/trust
Personalized next commands

Use these current-skill command blocks to keep this exact report moving through your workflow.

Record an interaction
curl -X POST https://agentverus.ai/api/v1/interactions \
  -H "Authorization: Bearer at_your_api_key" \
  -H "Content-Type: application/json" \
  -d '{"agentPlatform":"openclaw","skillId":"caee2607-5478-4698-ae84-19cefd62003d","interactedAt":"2026-03-15T12:00:00Z","outcome":"success"}'
Fetch trust JSON
curl https://agentverus.ai/api/v1/skill/caee2607-5478-4698-ae84-19cefd62003d/trust

Category Scores

53
Permissions
50
Injection
84
Dependencies
87
Behavioral
90
Content
100
Code Safety

Findings (12)

highCapability contract mismatch: inferred credential access is not declared-15

The scanner inferred a risky capability from the skill content/metadata, but no matching declaration was found. Add a declaration with a clear justification, or remove the behavior.

Content pattern: read `.env

Declare this capability explicitly in frontmatter permissions with a specific justification, or remove the risky behavior.

permissionsASST-05
highCapability contract mismatch: inferred command execution is not declared-12

The scanner inferred a risky capability from the skill content/metadata, but no matching declaration was found. Add a declaration with a clear justification, or remove the behavior.

Content pattern: shell

Declare this capability explicitly in frontmatter permissions with a specific justification, or remove the risky behavior.

permissionsASST-03
highCredential access detected-25

Found credential access pattern: "read `.env"

1. Use the `read` tool to read `.env`

Remove references to credentials and secrets. Skills should never access sensitive authentication data.

injectionASST-05
highCredential access detected-25

Found credential access pattern: "read .env and retry with --api-key"

- `Error: No API key provided.` -> read .env and retry with --api-key; if still failing, ask the user to set OPENROUTER_API_KEY

Remove references to credentials and secrets. Skills should never access sensitive authentication data.

injectionASST-05
mediumCapability contract mismatch: inferred file write is not declared-8

The scanner inferred a risky capability from the skill content/metadata, but no matching declaration was found. Add a declaration with a clear justification, or remove the behavior.

Content pattern: Saves PNG to `~/.openclaw/workspace

Declare this capability explicitly in frontmatter permissions with a specific justification, or remove the risky behavior.

permissionsASST-03
mediumCapability contract mismatch: inferred file read is not declared-6

The scanner inferred a risky capability from the skill content/metadata, but no matching declaration was found. Add a declaration with a clear justification, or remove the behavior.

Content pattern: file://

Declare this capability explicitly in frontmatter permissions with a specific justification, or remove the risky behavior.

permissionsASST-03
mediumCapability contract mismatch: inferred network access is not declared-6

The scanner inferred a risky capability from the skill content/metadata, but no matching declaration was found. Add a declaration with a clear justification, or remove the behavior.

Content pattern: https://openrouter.ai/api/v1/chat/completions

Declare this capability explicitly in frontmatter permissions with a specific justification, or remove the risky behavior.

permissionsASST-04
mediumMedia artifact handoff dependency-8

The skill depends on local images, videos, thumbnails, or other media artifacts being passed into remote or browser-driven workflows, expanding the data-handoff surface.

image generation

Review which external services or providers the skill depends on, what data crosses that boundary, and whether the dependency is necessary for the intended workflow.

dependenciesASST-04
mediumUnknown external reference-8

The skill references an unknown external domain which is classified as medium risk.

https://openrouter.ai/api/v1/chat/completions`

Verify that this external dependency is trustworthy and necessary.

dependenciesASST-04
mediumExternal AI provider delegation detected-10

Found external ai provider delegation pattern: "Gemini 3 Pro Image API"

The Gemini 3 Pro Image API supports three resolutions (uppercase K required):

Treat external AI-provider calls as data egress. Make it explicit what prompts, files, or images are sent to third-party providers and require approval before forwarding sensitive content.

behavioralASST-02
lowLocal file access detected (inside code block)-3

Found local file access pattern: "file://"

- Script also outputs `MEDIA_URL=file:///absolute/path` for each image

Treat local file browsing as privileged access. Restrict it to explicit user-approved paths and avoid combining it with unrestricted browser/session reuse.

behavioralASST-03
infoSafety boundaries defined

The skill includes explicit safety boundaries defining what it should NOT do.

Safety boundary patterns detected in content

Keep these safety boundaries. They improve trust.

contentASST-09