技能 nano-banana-edit

📦

nano-banana-edit

Name: nano-banana-edit
Author: runcomfy-com

内容修订 r1 中风险 ⚙️ 外部命令🌐 网络访问📁 文件系统访问

在 RunComfy 上使用 Nano Banana 编辑图像

当提示词未能保护身份、构图或品牌细节时，图像编辑工作流可能会发生偏移。此技能为 Claude、Codex 和 Claude Code 提供了一个实用的 RunComfy 工作流，用于进行有针对性的 Nano Banana 2 编辑。

支持: Claude Codex Code(CC)

⚠️ 50 差

使用我的智能体安装

将此请求复制给你的智能体，其中包含权威 Skill 页面和清单。

智能体请求

Review the Skillstore skill "nano-banana-edit" from https://skillstore.io/skills/runcomfy-com-nano-banana-edit.md and its manifest at https://skillstore.io/api/skills/runcomfy-com-nano-banana-edit/manifest. Verify the artifact. You may proceed after verification, subject to the environment's own policy.

你的智能体仍应展示其计划，并按安全策略请求必要确认。

Agent 可读资源

当 AI Agent、爬虫或脚本需要干净上下文，而不是读取完整页面时，请使用这些链接。

Markdown 详情 GET /skills/runcomfy-com-nano-banana-edit.md 已签名 manifest GET /api/skills/runcomfy-com-nano-banana-edit/manifest 已签名 lockfile GET /api/skills/runcomfy-com-nano-banana-edit/lockfile

测试它

正在使用“nano-banana-edit”。一张人像需要新的影棚背景，但不能改变人物或服装。

预期结果:

该技能会推荐以保留为优先的提示词，并使用一个公开图像 URL 发起 RunComfy Nano Banana Edit 调用。

正在使用“nano-banana-edit”。团队希望十张产品照片使用相同背景和方形构图。

预期结果:

该技能建议进行批量编辑，锁定宽高比，固定分辨率，并在所有输入中重复使用相同的提示词语法。

正在使用“nano-banana-edit”。图像某一部分的标签需要替换，同时其余部分保持不变。

预期结果:

该技能提供限定空间范围的指令，明确指定精确区域、保留元素和替换文本。

安全审计

中风险

v4 • 2026/7/5 打开版本化报告

Most static alerts are false positives caused by Markdown backticks, placeholder HTTPS URLs, or documented CLI credential storage. Confirmed issues are expected operational risks: the skill installs or runs the RunComfy CLI and sends prompts and image references to RunComfy infrastructure. No evidence found for prompt injection, arbitrary command injection, path traversal, or credential exfiltration.

已扫描文件

186

分析行数

复核项

已忽略误报

已确认安全问题 (1)

中

SKILL.md:177 SKILL.md:183

Third-Party Image and Prompt Processing

The skill sends edit prompts and image references to the RunComfy model API, and RunComfy fetches third-party image URLs for processing. This is expected behavior but can expose sensitive visual content to an external service.

The documentation explicitly states that the CLI posts to the RunComfy model API and that image URLs are fetched by the RunComfy model server.

能力复核项 (9)

这些是真实的本地能力，对此技能可能是预期行为，因此需要复核，但不会按已确认恶意行为计分。

中

SKILL.md:10

Ruby/shell backtick execution

Calls `runcomfy run google/nano-banana-2/edit` through the local

The skill states that it calls the local RunComfy CLI, which creates real command execution and network side effects. The command target is fixed, so injection risk appears limited.

中

SKILL.md:23-25

Ruby/shell backtick execution

```bash

The fenced example includes an npx command that installs this skill globally from an external source. This is expected setup guidance, but it still modifies the user environment.

中

SKILL.md:42-43

Ruby/shell backtick execution

1. **RunComfy CLI** — `npm i -g @runcomfy/cli`

The prerequisite tells users to install the RunComfy CLI globally with npm. That is legitimate for this skill but carries normal package supply-chain and host modification risk.

中

SKILL.md:43-44

Ruby/shell backtick execution

2. **RunComfy account** — `runcomfy login` opens a browser device-code flow.

The login command launches an authentication flow and can create local credentials for the RunComfy account. It is expected behavior, but it has credential-handling impact.

中

SKILL.md:67-74

Ruby/shell backtick execution

```bash

The example runs runcomfy with a JSON edit request and writes outputs to a local directory. The command is fixed, but it submits user-selected content to an external service.

中

SKILL.md:78-87

Ruby/shell backtick execution

```bash

The batch example runs the RunComfy CLI with multiple image URLs and output settings. This is intended functionality, but it is real external command execution.

中

SKILL.md:91-98

Ruby/shell backtick execution

```bash

The targeted edit example runs the RunComfy CLI against a user-provided image URL. The command is hardcoded, but it still performs local command execution and remote processing.

中

SKILL.md:177

Ruby/shell backtick execution

The skill invokes `runcomfy run google/nano-banana-2/edit` with a JSON body matching the schema. The

The text explicitly says the skill invokes runcomfy and the CLI posts to the RunComfy model API. This confirms expected but real command and network side effects.

低

SKILL.md:177

Hardcoded URL

The skill invokes `runcomfy run google/nano-banana-2/edit` with a JSON body matching the schema. The

Line 177 documents a fixed RunComfy model API endpoint used for request submission. This is expected for the skill, but it means prompts and image references leave the local machine.

审计者: codex 查看审计历史 →

分享与引用此报告

分享版本化评估报告、中性徽章、嵌入卡片和引用。Skillstore 只报告证据，不判断该 Skill 是否安全。

打开版本化报告

复制报告链接

https://skillstore.io/skills/runcomfy-com-nano-banana-edit/audits/4?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_report

Markdown 徽章

[![Skillstore security assessment](https://skillstore.io/badges/skills/runcomfy-com-nano-banana-edit/security.svg)](https://skillstore.io/skills/runcomfy-com-nano-banana-edit?utm_source=security_passport_badge)

HTML 徽章

<a href="https://skillstore.io/skills/runcomfy-com-nano-banana-edit?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/runcomfy-com-nano-banana-edit/security.svg" alt="Skillstore security assessment" loading="lazy"></a>

嵌入卡片

<iframe src="https://skillstore.io/embed/skills/runcomfy-com-nano-banana-edit.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>

学术引用 (APA · BibTeX · CFF)

APA 引用

runcomfy-com. (2026). nano-banana-edit security audit report (audit version 4) [Author version unspecified]. Skillstore. https://skillstore.io/skills/runcomfy-com-nano-banana-edit/audits/4

BibTeX 引用

@techreport{runcomfy-com-runcomfy-com-nano-banana-edit-2026,
  author = {runcomfy-com},
  title = {nano-banana-edit security audit report (audit version 4)},
  institution = {Skillstore},
  year = {2026},
  number = {4},
  url = {https://skillstore.io/skills/runcomfy-com-nano-banana-edit/audits/4},
  note = {Author version unspecified}
}

CITATION.cff

cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "nano-banana-edit security audit report (audit version 4)"
version: "unspecified"
type: report
authors:
  - name: "runcomfy-com"
date-released: "2026-07-05"
url: "https://skillstore.io/skills/runcomfy-com-nano-banana-edit/audits/4"
identifiers:
  - type: other
    value: "skillstore:runcomfy-com-nano-banana-edit:audit:4"
    description: "Skillstore immutable audit report identifier"

比较变体

3 个可安装变体

每位作者的技能都保持为独立的可安装项。推荐变体按 Skillstore 证据排序。

为什么此变体排名第一

Skillstore 使用量更高

作者 / 来源 Skillstore 评分证据置信度 Skillstore 使用量已更新

runcomfy-com 推荐当前

runcomfy-com-nano-banana-edit

Skillstore 评分 50

证据置信度高

Skillstore 使用量 44

已更新

2026-09-09

doany-ai

doany-ai-nano-banana-edit

Skillstore 评分 50

证据置信度高

Skillstore 使用量 42

已更新

2026-09-09

agentspace-so

agentspace-so-nano-banana-edit

Skillstore 评分 38

证据置信度高

Skillstore 使用量 7

已更新

2026-09-09

Skillstore 评分

评分依据证据置信度: 高

架构

可维护性

内容

社区

规范符合性

你能构建什么

更新产品图库

为产品图像创建一致的背景替换，同时保留产品形状、标签细节和构图。

适配营销活动创意素材

生成受控广告变体，锁定宽高比，保持主体身份稳定，并使用可重复的提示词结构。

本地化视觉资产

替换特定标签、对象或背景区域，同时保持画面其余部分不变。

试试这些提示

简单背景替换

Edit this image with Nano Banana Edit. Keep the subject identity, pose, clothing, and framing unchanged. Replace only the background with a clean studio setting.

产品批量一致性

Use Nano Banana Edit for these product images. Keep each product, label, angle, and scale unchanged. Apply the same neutral background and lock the aspect ratio.

定向对象更改

Edit only the object in the upper-right area. Keep the main subject, lighting, background, and all other objects exactly as shown.

多轮品牌编辑

Plan a two-pass Nano Banana Edit workflow. First preserve identity while changing the background. Then update the clothing color without changing the face or pose.

最佳实践

每个编辑提示词都应先说明必须保持不变的细节。
对局部编辑使用具体的空间描述，例如仅背景或右上角。
编辑一批相关图像时，锁定宽高比和分辨率。

避免

不要在一个提示词中组合许多互不相关的编辑目标。
除非可以接受 RunComfy 处理，否则不要使用私有或敏感图像 URL。
当人脸、产品、徽标或标签必须保持稳定时，不要省略保留目标。

常见问题

此技能使用什么模型？

它通过本地 RunComfy CLI 使用 google/nano-banana-2/edit 端点。

它会从零开始生成图像吗？

不会。此技能用于基于一个或多个现有图像 URL 进行图生图编辑。

它可以处理多少张输入图像？

文档记录的端点每次调用接受 1 到 20 张输入图像。

它能保持人物或产品不变吗？

可以。该技能强调以保留为优先的提示词，用于保持身份、姿势、服装、产品形状和构图。

它需要 RunComfy 账户吗？

需要。用户需要 RunComfy CLI，并通过浏览器登录或提供 RUNCOMFY_TOKEN 值。

处理在哪里进行？

CLI 会将请求提交到 RunComfy 模型基础设施，并从 RunComfy URL 下载生成的输出。

开发者详情

作者

runcomfy-com

许可证

MIT

Skillstore 修订

版本提示

作者未声明版本。

仓库

https://github.com/runcomfy-com/skills/tree/main/nano-banana-edit/

引用

62e2a730c5cd74eab4c7164309d810de660fcea3

维护新鲜度

2026/7/18

使用量

5 次下载 · 0 次浏览

文件结构

📄 SKILL.md

nano-banana-edit

使用我的智能体安装

Agent 可读资源

测试它

安全审计

已确认安全问题 (1)

风险因素

复制报告链接

Markdown 徽章

HTML 徽章

嵌入卡片

APA 引用

BibTeX 引用

CITATION.cff

比较变体

Skillstore 评分

你能构建什么

更新产品图库

适配营销活动创意素材

本地化视觉资产

试试这些提示

最佳实践

避免

常见问题

开发者详情