nanobanana

SUSPICIOUS. The core behavior is coherent for an image-generation skill and the default endpoint is Google’s official Gemini API, but the skill explicitly supports arbitrary Gemini-compatible gateways and forwards API keys to them, including both auth header styles in auto mode. That expanded data flow is proportionate only when the user intentionally trusts the gateway; otherwise it creates medium risk of credential and content exposure.