IMA Studio All-in-One — Image, Video, Music, SeeDream, Veo, Suno. Banana
PassAudited by ClawScan on May 10, 2026.
Overview
This appears to be a disclosed IMA media-generation integration that needs an IMA API key and can upload user-selected media, with scoped local logs and no artifact-backed hidden or destructive behavior found.
Install this only if you intend to use IMA Studio and are comfortable sending prompts, selected media, and an IMA API key to the disclosed IMA/upload endpoints. Review local file paths before image/video uploads, and delete the scoped logs or preference file if you do not want them retained.
Findings (4)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
The key can authorize IMA account activity and upload-token requests for selected local media.
The skill requires a provider API key and discloses the exact services that receive it.
The IMA API key is required at runtime (--api-key or IMA_API_KEY). It is always sent to api.imastudio.com ... sent to imapi.liveme.com only for local image uploads
Use a scoped or test IMA key if available, and provide the key only if you trust this IMA integration.
If the user or agent supplies the wrong local path, private images could be uploaded to IMA/CDN infrastructure.
The helper can read local files supplied as image inputs and upload them to the provider workflow.
--input-images: accepts HTTPS URLs or local file paths (local files auto-uploaded to IMA CDN).
Only pass image paths you intend to upload, and review prompts or commands before running image/video tasks with local files.
Generation preferences and operational logs can remain on disk, and optional external reference notes can influence workflow choices.
The skill persists preferences/logs and may use optional reference material from another installed skill.
"readWrite": ["~/.openclaw/memory/ima_prefs.json", "~/.openclaw/logs/ima_skills/"] ... "crossSkillReadOptional": ["~/.openclaw/skills/ima-knowledge-ai/references/*"]
Review or delete the IMA preference/log files if desired, and install the optional knowledge skill only if you trust its reference content.
Running the command will remove the skill's local logs.
This is a destructive shell command, but it is presented as manual cleanup and targets only this skill's log directory.
Delete logs: `rm -rf ~/.openclaw/logs/ima_skills/`
Run it only when you intentionally want to delete IMA logs, and do not broaden the path.