← Back to Skills Marketplace
voidreal

Max Studio Api

by void · GitHub ↗ · v1.0.7 · MIT-0
cross-platform ✓ Security Clean
193
Downloads
0
Stars
0
Active Installs
11
Versions
Install in OpenClaw
/install max-studio-api
Description
Integrate with the Max Studio API for image and video generation, uploads, task polling, media downloads, and batch result packaging.
Usage Guidance
This skill appears to implement exactly what it claims: a thin Python CLI wrapper around the Max Studio HTTP API. Before installing, consider: (1) Verify you obtained your API key from the official site (max-studio.shop) and confirm the API hostname (max-studio.store) yourself to avoid phishing. (2) Protect your Google access token (JWT) and API key — passing them as CLI arguments can expose them in process lists or shell history; prefer supplying secrets via a secure prompt, environment variable, or temporary file if you modify the script. (3) The skill does not automate Google sign-in (per its docs) — do not reuse your Google username/password here. (4) The code will download media to disk when asked; check the download destination before running. (5) If you have doubts about the service's legitimacy, review the HTTP calls in scripts/max_studio.py and test with a throwaway API key first.
Capability Analysis
Type: OpenClaw Skill Name: max-studio-api Version: 1.0.7 The skill is a functional CLI wrapper for the Max Studio API (max-studio.store) used for AI image and video generation. The Python script `scripts/max_studio.py` uses the standard `requests` library to interact with the API and includes a utility to download generated media. While the service requires users to provide a Google Access Token (JWT), which is a high-risk credential, the `SKILL.md` file contains explicit security warnings and instructions for the AI agent to avoid automated credential theft or unauthorized storage. The code is transparent, lacks obfuscation, and its behavior is strictly aligned with the documented purpose.
Capability Tags
requires-oauth-tokenrequires-sensitive-credentials
Capability Assessment
✓ Purpose & Capability
Name/description, SKILL.md, api_docs.md, and the Python CLI all consistently implement HTTP calls to max-studio.store and require an API key and (for most media endpoints) a Google JWT. No unrelated services, binaries, or credentials are requested.
ℹ Instruction Scope
SKILL.md explicitly instructs the user to provide an API key and to paste a Google JWT manually and warns against automating Google login or extracting tokens; the runtime code only uses those inputs and performs HTTP requests and downloads. Note: passing JWT/API key on the command line can expose them to process-list or shell history — the skill does not itself instruct a safer input method (env or prompt).
✓ Install Mechanism
No install spec; the skill is instruction-only with a small Python script and a requirements.txt listing 'requests'. This is proportionate and low-risk compared to arbitrary remote downloads or install scripts.
ℹ Credentials
The skill requests no environment variables nor persistent credentials, which is coherent. However it requires the user to supply a Google access token (JWT) and API key at runtime — both are sensitive. The JWT is not declared as an environment variable but is required as a CLI argument for many endpoints; that is reasonable for the API but users should be aware of the sensitivity and CLI exposure risk.
✓ Persistence & Privilege
The skill is not always-enabled, does not request elevated persistence, and does not modify other skills or system configuration. It writes downloaded media to disk only when the user invokes the download command.
How to Use
  1. Make sure OpenClaw is installed (local or Docker)
  2. Run the install command in chat: /install max-studio-api
  3. After installation, invoke the skill by name or use /max-studio-api
  4. Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.7
- Improved the SKILL.md documentation to clarify that the skill does not automate Google login, does not access browser profile state, and does not store tokens on disk. - Added a note specifying that only user-provided tokens are sent in API request payloads.
v1.0.6
- Added a reusable Python CLI wrapper script (`scripts/max_studio.py`) for Max Studio API integration. - Introduced `requirements.txt` to specify Python dependencies. - Updated documentation to clarify the distinction between API key registration (`max-studio.shop`) and API endpoint usage (`max-studio.store`), and improved JWT acquisition instructions.
v1.0.5
- Removed the reference and instructions for `references/jwt-acquisition.md`. - Updated the "Files" section in documentation to remove JWT acquisition guide and clarify dependencies. - Updated endpoint registration URL information to consistently refer to `max-studio.store`. - References now direct users to `api_docs.md` for detailed API information.
v1.0.4
- Updated documentation to highlight the difference between API endpoint (`max-studio.store`) and API key provisioning (`max-studio.shop`) domains. - Removed Python scripts and requirements file; CLI and automatic script support are no longer included. - Usage instructions and command examples in documentation retained for reference. - Security guidance and manual steps for JWT/API key collection reaffirmed. - References to removed files (scripts and dependencies) remain for historical context.
v1.0.3
- Updated documentation for clearer setup instructions and security best practices. - Changed references from "max-studio.shop" to "max-studio.store" for API key registration and endpoint. - Simplified credential acquisition steps to recommend only manual JWT retrieval; clarified that automated extraction is unsupported and discouraged. - Streamlined the command examples and file descriptions for easier onboarding. - Added warnings not to share Google credentials or run unauthorized JWT extraction scripts. - Improved references to supporting documentation for detailed API and JWT guidance.
v1.0.2
Summary: This release updates credential handling and introduces requirements management. - Added a requirements.txt file to document and manage Python dependencies. - Updated setup instructions: API key and JWT must now be provided directly with each command using `--api-key` and `--jwt`; environment variable and credentials.txt support is removed. - SKILL.md now reflects the new credential workflow and clarifies the process for new users. - Documentation improved for first-time usage and clarified supported commands.
v1.0.1
**Max Studio API Skill v1.0.1 – Credential Handling Update** - Added support for storing credentials in a `credentials.txt` file (API Key and JWT on separate lines) for reuse. - Updated setup instructions: new users should obtain API Key and JWT manually, then save them in `credentials.txt`. - The skill now reads API Key and JWT from `credentials.txt` for subsequent requests—no more .env/environment variable usage. - Removed automated or assistant-driven JWT extraction; users must copy JWT from https://labs.google/fx/api/auth/session themselves. - Cleaned up documentation to clarify the new manual credential process and removed references to the old workflow and removed script.
v0.1.3
Require Max Studio API for image and video generation requests, remove fallback to built-in generation tools, and keep script-first execution workflow.
v0.1.2
Strongly prefer Max Studio API for image and video generation requests, keep reusable script-first workflows, and reserve built-in generation tools for fallback only.
v0.1.1
Add rule to prefer reusable scripts for image/video generation requests, improve polling reliability with retry logic, and clean package contents for public distribution.
v0.1.0
Initial public release: Max Studio API integration, JWT acquisition flows, batch output manifests, and standalone curl downloaders.
Metadata
Slug max-studio-api
Version 1.0.7
License MIT-0
All-time Installs 0
Active Installs 0
Total Versions 11
Frequently Asked Questions

What is Max Studio Api?

Integrate with the Max Studio API for image and video generation, uploads, task polling, media downloads, and batch result packaging. It is an AI Agent Skill for Claude Code / OpenClaw, with 193 downloads so far.

How do I install Max Studio Api?

Run "/install max-studio-api" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.

Is Max Studio Api free?

Yes, Max Studio Api is completely free, licensed under MIT-0. You can download, install and use it at no cost.

Which platforms does Max Studio Api support?

Max Studio Api is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).

Who created Max Studio Api?

It is built and maintained by void (@voidreal); the current version is v1.0.7.

More Skills
self-improving agent
Captures learnings, errors, and corrections to enable continuous improvement. Use when: (1) A command or operation fails unexpectedly, (2) User corrects Clau...
⬇ 463283 · by pskoett
Skill Vetter
Security-first skill vetting for AI agents. Use before installing any skill from ClawdHub, GitHub, or other sources. Checks for red flags, permission scope, and suspicious patterns.
⬇ 259410 · by spclaudehome
Polymarket
Query Polymarket prediction markets. Check odds, find trending markets, search events, track price movements.
⬇ 232503 · by joelchance
Self-Improving + Proactive Agent
Self-reflection + Self-criticism + Self-learning + Self-organizing memory. Agent evaluates its own work, catches mistakes, and improves permanently. Use when...
⬇ 200423 · by ivangdavila
Github
Interact with GitHub using the `gh` CLI. Use `gh issue`, `gh pr`, `gh run`, and `gh api` for issues, PRs, CI runs, and advanced queries.
⬇ 191115 · by steipete
ontology
Typed knowledge graph for structured agent memory and composable skills. Use when creating/querying entities (Person, Project, Task, Event, Document), linkin...
⬇ 190156 · by oswalpalash

💬 Comments