Waxell

skill

nano-banana-2 Review findings

prime-skillsprime-skills/runcomfy-agent-skillsupdated

Generate images with Google Nano Banana 2 (Gemini-family flash-tier text-to-image) on RunComfy, bundled with the model's documented prompting patterns so the skill gets sharper output than naive prompting against the same model. Documents Nano Banana 2's strengths (rapid iteration, in-image typography rendering, predictable framing, optional web-grounded context), the resolution-tier pricing, the safety-tolerance dial, and when to route to Nano Banana Pro / GPT Image 2 / Flux 2 / Seedream instead. Calls `runcomfy run google/nano-banana-2/text-to-image` through the local RunComfy CLI.…
prime-skills's own description, from the skill's files.
Stars
61
Version
v1
Copies
4

Overview

holdReview findings

Waxell's checks found 1 finding to review, highest severity high.

Highest severity
high
Findings
1
What ran
Static analysis

A clean result means nothing alarming in what is published, not a guarantee. How the checks work

Copies

Identical content published somewhere else. This review covers every copy.

We don't republish the skill's instructions. Read them on GitHub at the reviewed commit.

Security

Security scan

Checked 2 days ago

Result

Review findings Waxell's checks found 1 finding to review, highest severity high.

Checked with static analysis: servers it launches, packages it installs at runtime, scripts piped to a shell and bundled binaries. Nothing was run. How the checks work

Findings (1)

high · 1

  • high

    Tells Claude to install unpinned packages (@runcomfy/cli)

    SKILL.md:50 · skill_risk:S2

Versions

Version history

Each distinct content we have seen, newest first, with the verdict it got at the time.

One version so far: v1, seen 2026-11-03.

Files

Files

1 files, 9 KB in total. Names only; open them on GitHub.

  • SKILL.md

See and control which skills your people use

Inside your organization, Waxell scans each skill and plugin before anyone installs it, approves what passes and publishes it to a private marketplace, and puts every MCP tool call behind one governed URL.

30 minutes. No commitment.

SOC 2 Type II attested · ISO/IEC 27001:2022 certified · HIPAA with a BAA · aligned to the EU AI Act and NIST AI RMF

More images, video & audio skills and plugins

See all