generate-images
Generates and edits images using Google Gemini, enabling the creation of visual content like logos, mockups, and diagrams.
Install this skill
Security score
The generate-images skill was audited on Jun 13, 2026 and we found 17 security issues across 2 threat categories. Review the findings below before installing.
Categories Tested
Security Issues
Access to hidden dotfiles in home directory
| 8 | This skill generates images using the Nano Banana model via `~/.claude/scripts/generate_image.py`. |
Access to hidden dotfiles in home directory
| 18 | - `GEMINI_API_KEY` must be set in `~/.claude/settings.json` under `env` |
Access to hidden dotfiles in home directory
| 19 | - Script: `~/.claude/scripts/generate_image.py` (runs via `uv run`) |
Access to hidden dotfiles in home directory
| 21 | **Reference images:** Users can store named images in `~/.claude/images/` for use as editing sources. Filenames describe the content (e.g., `myself.jpg`, `company-logo.png`, `office.jpg`). |
Access to hidden dotfiles in home directory
| 31 | uv run ~/.claude/scripts/generate_image.py --check-key |
Access to hidden dotfiles in home directory
| 34 | If `API_KEY_MISSING`: inform the user they need to set `GEMINI_API_KEY` in `~/.claude/settings.json` or get one at https://aistudio.google.com/apikey |
Access to hidden dotfiles in home directory
| 42 | ls ~/.claude/images/ 2>/dev/null |
Access to hidden dotfiles in home directory
| 52 | - If no match and the user clearly references a personal image, ask them to place it in `~/.claude/images/` |
Access to hidden dotfiles in home directory
| 62 | - If editing a reference image, save to the current project (not back to `~/.claude/images/`) |
Access to hidden dotfiles in home directory
| 83 | uv run ~/.claude/scripts/generate_image.py "prompt here" --output path/to/output.png |
Access to hidden dotfiles in home directory
| 88 | uv run ~/.claude/scripts/generate_image.py "editing instructions" --edit ~/.claude/images/myself.jpg --output path/to/output.png |
Access to hidden dotfiles in home directory
| 93 | uv run ~/.claude/scripts/generate_image.py "editing instructions" --edit path/to/source.png --output path/to/output.png |
Access to hidden dotfiles in home directory
| 122 | → Match `myself.jpg` in `~/.claude/images/` |
Access to hidden dotfiles in home directory
| 123 | → Run: `uv run ~/.claude/scripts/generate_image.py "Add a colorful clown hat to the person in this photo" --edit ~/.claude/images/myself.jpg --output clown-hat-myself.png` |
Access to hidden dotfiles in home directory
| 127 | → Match `dog.jpg` or `my-dog.jpg` in `~/.claude/images/` |
Access to hidden dotfiles in home directory
| 128 | → Run: `uv run ~/.claude/scripts/generate_image.py "Place the dog on a tropical beach with waves and sunset" --edit ~/.claude/images/dog.jpg --output dog-on-beach.png` |
External URL reference
| 34 | If `API_KEY_MISSING`: inform the user they need to set `GEMINI_API_KEY` in `~/.claude/settings.json` or get one at https://aistudio.google.com/apikey |