Skills nano-banana-builder

📦

nano-banana-builder

Name: nano-banana-builder
Author: CesarAugustusGroB

Content revision r1 Safe ⚙️ External commands🌐 Network access🔑 Env variables

Build Gemini Image Apps

Image generation apps need correct model names, server-side API use, storage, and quota handling. This skill guides Claude, Codex, and Claude Code through production-ready Nano Banana app patterns.

Supports: Claude Codex Code(CC)

📊 75 Adequate

Install with my Agent

Copy this request to your Agent. It includes the canonical Skill page and manifest.

Agent request

Review the Skillstore skill "nano-banana-builder" from https://skillstore.io/skills/cesaraugustusgrob-nano-banana-builder.md and its manifest at https://skillstore.io/api/skills/cesaraugustusgrob-nano-banana-builder/manifest. Verify the artifact. You may proceed after verification, subject to the environment's own policy.

Your Agent should still show its plan and request any confirmation required by the security policy.

Agent-readable resources

Use these links when an AI agent, crawler, or script needs clean context instead of reading the full page.

Markdown detail GET /skills/cesaraugustusgrob-nano-banana-builder.md Signed manifest GET /api/skills/cesaraugustusgrob-nano-banana-builder/manifest Signed lockfile GET /api/skills/cesaraugustusgrob-nano-banana-builder/lockfile

Test it

Using "nano-banana-builder". Build a prompt-to-image app for marketing thumbnails.

Expected outcome:

A Next.js implementation plan with server-side generation, model selection, prompt form, gallery display, and storage recommendations.

Using "nano-banana-builder". Add editing to an existing generated image workflow.

Expected outcome:

A conversational editing flow that keeps prior image context.
A client component with explicit edit submission.
Server guidance for passing image data safely.

Using "nano-banana-builder". Make the app production ready.

Expected outcome:

A checklist covering rate limits, object storage, cached results, environment variables, user feedback, and retry behavior.

Security Audit

Safe

v10 • 7/9/2026 Open versioned report

Static analysis flagged many template literals, environment variable examples, placeholder URLs, and documentation snippets. Manual review found these are instructional examples for Gemini image apps, not command execution, secret exfiltration, or prompt injection. No net-new semantic security findings were identified.

Files scanned

1,138

Lines analyzed

Review items

False positives ignored

Risk Factors

⚙️ External commands (37)

references/advanced-patterns.md:49-55 references/advanced-patterns.md:55-57 references/advanced-patterns.md:101-108 references/advanced-patterns.md:181-187 references/advanced-patterns.md:189-201 references/advanced-patterns.md:201-231 references/configuration.md:81-98 references/configuration.md:98-101 references/configuration.md:101-116 references/configuration.md:138-150 references/configuration.md:150-165 references/configuration.md:172-174 references/configuration.md:214-215 references/configuration.md:215-232 references/configuration.md:293-300 SKILL.md:23 SKILL.md:24 SKILL.md:27 SKILL.md:28 SKILL.md:29 SKILL.md:30 SKILL.md:32 SKILL.md:55 SKILL.md:66 SKILL.md:67 SKILL.md:68 SKILL.md:70 SKILL.md:78-99 SKILL.md:99-103 SKILL.md:103-138 SKILL.md:138-169 SKILL.md:169-170 SKILL.md:170 SKILL.md:174 SKILL.md:232-248 SKILL.md:248-250 SKILL.md:250-256

🌐 Network access (7)

references/advanced-patterns.md:257 references/configuration.md:333 references/configuration.md:397 references/configuration.md:400 references/configuration.md:403 references/configuration.md:407 SKILL.md:241

🔑 Env variables (19)

No confirmed security findings were detected by the latest completed static and semantic audit. This does not prove the skill has no side effects.

Audited by: claude View Audit History →

Share & cite this report

Share the versioned assessment report, neutral badge, embed card, and citations. Skillstore reports evidence without deciding whether this Skill is safe.

Open versioned report

Copy report link

https://skillstore.io/skills/cesaraugustusgrob-nano-banana-builder/audits/10?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_report

Markdown badge

[![Skillstore security assessment](https://skillstore.io/badges/skills/cesaraugustusgrob-nano-banana-builder/security.svg)](https://skillstore.io/skills/cesaraugustusgrob-nano-banana-builder?utm_source=security_passport_badge)

HTML badge

<a href="https://skillstore.io/skills/cesaraugustusgrob-nano-banana-builder?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/cesaraugustusgrob-nano-banana-builder/security.svg" alt="Skillstore security assessment" loading="lazy"></a>

Embed card

<iframe src="https://skillstore.io/embed/skills/cesaraugustusgrob-nano-banana-builder.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>

Academic citations (APA · BibTeX · CFF)

APA citation

CesarAugustusGroB. (2026). nano-banana-builder security audit report (audit version 10) [Author version unspecified]. Skillstore. https://skillstore.io/skills/cesaraugustusgrob-nano-banana-builder/audits/10

BibTeX citation

@techreport{cesaraugustusgrob-cesaraugustusgrob-nano-banana-builder-2026,
  author = {CesarAugustusGroB},
  title = {nano-banana-builder security audit report (audit version 10)},
  institution = {Skillstore},
  year = {2026},
  number = {10},
  url = {https://skillstore.io/skills/cesaraugustusgrob-nano-banana-builder/audits/10},
  note = {Author version unspecified}
}

CITATION.cff

cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "nano-banana-builder security audit report (audit version 10)"
version: "unspecified"
type: report
authors:
  - name: "CesarAugustusGroB"
date-released: "2026-07-09"
url: "https://skillstore.io/skills/cesaraugustusgrob-nano-banana-builder/audits/10"
identifiers:
  - type: other
    value: "skillstore:cesaraugustusgrob-nano-banana-builder:audit:10"
    description: "Skillstore immutable audit report identifier"

Skillstore Score

Why this score Evidence Confidence: High

Architecture

Maintainability

Content

Community

Spec Compliance

What You Can Build

Launch an image generator

Create a Next.js app that turns prompts into images with the correct Gemini image model and server-side API calls.

Add iterative image editing

Build a conversational editor that keeps image history and lets users refine outputs through natural language.

Prepare production operations

Plan storage, rate limits, caching, and user-friendly error handling before opening the tool to more users.

Try These Prompts

Create a basic generator

Use nano-banana-builder to create a simple Next.js image generator with gemini-2.5-flash-image and a clear loading state.

Add storage

Use nano-banana-builder to add Vercel Blob storage to my Gemini image generator and return saved image URLs.

Build iterative editing

Use nano-banana-builder to design an iterative image editor with conversation history, image upload, and explicit edit actions.

Prepare for production

Use nano-banana-builder to review my image app for rate limits, storage choices, caching, error handling, and cost controls.

Best Practices

Keep API keys on the server and expose generation through server actions or API routes.
Use the fast model for drafts and the pro model for final quality or text-heavy images.
Add explicit submit actions, loading states, storage, and rate limits before production release.

Avoid

Do not invent Gemini model names or add date suffixes to image model identifiers.
Do not generate images on every keystroke because it wastes quota and slows the app.
Do not store large base64 images directly in the database for production workflows.