← 返回 Skills 市场
193
总下载
0
收藏
0
当前安装
11
版本数
在 OpenClaw 中安装
/install max-studio-api
功能描述
Integrate with the Max Studio API for image and video generation, uploads, task polling, media downloads, and batch result packaging.
安全使用建议
This skill appears to implement exactly what it claims: a thin Python CLI wrapper around the Max Studio HTTP API. Before installing, consider: (1) Verify you obtained your API key from the official site (max-studio.shop) and confirm the API hostname (max-studio.store) yourself to avoid phishing. (2) Protect your Google access token (JWT) and API key — passing them as CLI arguments can expose them in process lists or shell history; prefer supplying secrets via a secure prompt, environment variable, or temporary file if you modify the script. (3) The skill does not automate Google sign-in (per its docs) — do not reuse your Google username/password here. (4) The code will download media to disk when asked; check the download destination before running. (5) If you have doubts about the service's legitimacy, review the HTTP calls in scripts/max_studio.py and test with a throwaway API key first.
功能分析
Type: OpenClaw Skill
Name: max-studio-api
Version: 1.0.7
The skill is a functional CLI wrapper for the Max Studio API (max-studio.store) used for AI image and video generation. The Python script `scripts/max_studio.py` uses the standard `requests` library to interact with the API and includes a utility to download generated media. While the service requires users to provide a Google Access Token (JWT), which is a high-risk credential, the `SKILL.md` file contains explicit security warnings and instructions for the AI agent to avoid automated credential theft or unauthorized storage. The code is transparent, lacks obfuscation, and its behavior is strictly aligned with the documented purpose.
能力标签
能力评估
Purpose & Capability
Name/description, SKILL.md, api_docs.md, and the Python CLI all consistently implement HTTP calls to max-studio.store and require an API key and (for most media endpoints) a Google JWT. No unrelated services, binaries, or credentials are requested.
Instruction Scope
SKILL.md explicitly instructs the user to provide an API key and to paste a Google JWT manually and warns against automating Google login or extracting tokens; the runtime code only uses those inputs and performs HTTP requests and downloads. Note: passing JWT/API key on the command line can expose them to process-list or shell history — the skill does not itself instruct a safer input method (env or prompt).
Install Mechanism
No install spec; the skill is instruction-only with a small Python script and a requirements.txt listing 'requests'. This is proportionate and low-risk compared to arbitrary remote downloads or install scripts.
Credentials
The skill requests no environment variables nor persistent credentials, which is coherent. However it requires the user to supply a Google access token (JWT) and API key at runtime — both are sensitive. The JWT is not declared as an environment variable but is required as a CLI argument for many endpoints; that is reasonable for the API but users should be aware of the sensitivity and CLI exposure risk.
Persistence & Privilege
The skill is not always-enabled, does not request elevated persistence, and does not modify other skills or system configuration. It writes downloaded media to disk only when the user invokes the download command.
如何使用
- 确保已安装 OpenClaw（本地或 Docker 部署）
- 在对话框中输入安装命令：
/install max-studio-api - 安装完成后，直接呼叫该 Skill 的名称或使用
/max-studio-api触发 - 根据 Skill 的参数说明提供必要输入，即可获得结构化输出
版本历史
v1.0.7
- Improved the SKILL.md documentation to clarify that the skill does not automate Google login, does not access browser profile state, and does not store tokens on disk.
- Added a note specifying that only user-provided tokens are sent in API request payloads.
v1.0.6
- Added a reusable Python CLI wrapper script (`scripts/max_studio.py`) for Max Studio API integration.
- Introduced `requirements.txt` to specify Python dependencies.
- Updated documentation to clarify the distinction between API key registration (`max-studio.shop`) and API endpoint usage (`max-studio.store`), and improved JWT acquisition instructions.
v1.0.5
- Removed the reference and instructions for `references/jwt-acquisition.md`.
- Updated the "Files" section in documentation to remove JWT acquisition guide and clarify dependencies.
- Updated endpoint registration URL information to consistently refer to `max-studio.store`.
- References now direct users to `api_docs.md` for detailed API information.
v1.0.4
- Updated documentation to highlight the difference between API endpoint (`max-studio.store`) and API key provisioning (`max-studio.shop`) domains.
- Removed Python scripts and requirements file; CLI and automatic script support are no longer included.
- Usage instructions and command examples in documentation retained for reference.
- Security guidance and manual steps for JWT/API key collection reaffirmed.
- References to removed files (scripts and dependencies) remain for historical context.
v1.0.3
- Updated documentation for clearer setup instructions and security best practices.
- Changed references from "max-studio.shop" to "max-studio.store" for API key registration and endpoint.
- Simplified credential acquisition steps to recommend only manual JWT retrieval; clarified that automated extraction is unsupported and discouraged.
- Streamlined the command examples and file descriptions for easier onboarding.
- Added warnings not to share Google credentials or run unauthorized JWT extraction scripts.
- Improved references to supporting documentation for detailed API and JWT guidance.
v1.0.2
Summary: This release updates credential handling and introduces requirements management.
- Added a requirements.txt file to document and manage Python dependencies.
- Updated setup instructions: API key and JWT must now be provided directly with each command using `--api-key` and `--jwt`; environment variable and credentials.txt support is removed.
- SKILL.md now reflects the new credential workflow and clarifies the process for new users.
- Documentation improved for first-time usage and clarified supported commands.
v1.0.1
**Max Studio API Skill v1.0.1 – Credential Handling Update**
- Added support for storing credentials in a `credentials.txt` file (API Key and JWT on separate lines) for reuse.
- Updated setup instructions: new users should obtain API Key and JWT manually, then save them in `credentials.txt`.
- The skill now reads API Key and JWT from `credentials.txt` for subsequent requests—no more .env/environment variable usage.
- Removed automated or assistant-driven JWT extraction; users must copy JWT from https://labs.google/fx/api/auth/session themselves.
- Cleaned up documentation to clarify the new manual credential process and removed references to the old workflow and removed script.
v0.1.3
Require Max Studio API for image and video generation requests, remove fallback to built-in generation tools, and keep script-first execution workflow.
v0.1.2
Strongly prefer Max Studio API for image and video generation requests, keep reusable script-first workflows, and reserve built-in generation tools for fallback only.
v0.1.1
Add rule to prefer reusable scripts for image/video generation requests, improve polling reliability with retry logic, and clean package contents for public distribution.
v0.1.0
Initial public release: Max Studio API integration, JWT acquisition flows, batch output manifests, and standalone curl downloaders.
元数据
常见问题
Max Studio Api 是什么？
Integrate with the Max Studio API for image and video generation, uploads, task polling, media downloads, and batch result packaging. 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件，目前累计下载 193 次。
如何安装 Max Studio Api？
在 OpenClaw 或 Claude Code 对话框中运行命令「/install max-studio-api」即可一键安装，无需额外配置。
Max Studio Api 是免费的吗？
是的，Max Studio Api 完全免费，采用 MIT-0 许可证，可自由下载、安装和使用。
Max Studio Api 支持哪些平台？
Max Studio Api 跨平台运行，可在任意部署了 OpenClaw / Claude Code 的环境中使用（cross-platform）。
谁开发了 Max Studio Api？
由 void（@voidreal）开发并维护，当前版本 v1.0.7。
推荐 Skills