360 Secure SkillHub
360 安全技能中心

flux-2

核心功能是通过RunAPI调用Flux 2系列模型生成或改绘图像，支持多种变体。典型场景：单次生成用RunAPI CLI；应用/后端生产开发用SDK，禁用CLI作生产运行时。输入需为符合合约的JSON请求，可含本地媒体路径；输出为验证后的图像文件及JSON响应，需确保文件合规，另有严谨的错误处理规则。

runapi-ai
热度 53.96
最近更新 2026-08-12 14:05:25
分类：创作依赖：代码执行 / 第三方 API / 读写文件应用场景：图像生成

安装技能

复制下面的话术发给你的 Agent，它会通过 secure-skills 检索并安装该技能。

执行命令安装此 skill： npx secure-skills-cli add runapi-flux-2
Metadata
name
flux-2
description
Generate and remix images with Flux 2 through RunAPI. Use when the user asks an agent to create or transform images with Flux 2. Default to the RunAPI CLI for one-off generation; use SDKs only when the user is integrating RunAPI into an app or backend.
documentation
https://runapi.ai/models/flux-2.md
provider_page
https://runapi.ai/providers/black-forest-labs.md
catalog
https://runapi.ai/models.md
metadata
{"openclaw":{"homepage":"https://runapi.ai/models/flux-2","requires":{"bins":["runapi"]},"install":[{"kind":"brew","formula":"runapi-ai/tap/runapi","bins":["runapi"]}],"envVars":[{"name":"RUNAPI_API_KEY","required":false,"description":"Optional RunAPI API key; agents should prefer environment auth or saved CLI config. Browser login is interactive fallback only."}]}}

Flux 2 on RunAPI

Choose route

  • For a one-off artifact or result, use the registered flux-2 service in the runapi CLI. If the installed command catalog does not list it, stop and report the missing service instead of inventing a command.
  • For an app, backend, worker, library, webhook pipeline, or production codebase, go directly to Integrate with SDK. Never shell out to the CLI as the production runtime.

Discover contract

Authenticate, then inspect the installed command catalog and the selected operation's current contract:

runapi auth status > auth.json
jq -e '.authenticated == true' auth.json
runapi flux-2 --help
runapi flux-2 <operation> --help
curl --fail --location https://runapi.ai/docs/api/flux-2/<operation>.md --output contract.md

If authentication is false, stop before submitting. Ask the user to provide a valid RUNAPI_API_KEY, or import a user-provided key from stdin with runapi auth import-token --token -; use interactive browser login only when the user explicitly requests it. Choose <operation> only from service help. Treat command help as authoritative for the installed operation, model, and top-level field roster. Treat its API Reference as authoritative for the complete request schema, nested fields, conditional rules, task behavior, and response variants. If the two surfaces disagree, stop and report the contract mismatch instead of guessing.

Build request

Create request.json as valid JSON using only fields accepted by the discovered operation contract. For the chosen model and values, evaluate every applicable conditional rule as a set: satisfy every required field, omit every forbidden field, and stop on unresolved contradictions.

Traverse nested objects and arrays before execution. Close every relationship stated by the discovered contract, including uniqueness constraints and cross-references between nested values.

For a discovered local media input, including file-typed fields and top-level media URL fields, put an agent-readable local file path directly in request.json. The CLI consumes file fields as declared and uploads local paths in top-level media URL fields. Use runapi files create only when the user needs a reusable URL, provides Base64, or the discovered contract explicitly requires a separate upload.

Validate the file before sending it:

jq empty request.json

Execute

Submit exactly once and persist the task response before waiting:

runapi flux-2 <operation> --async --input-file request.json > task.json
task_id="$(jq -er '.id' task.json)"

For a one-off result, immediately wait for that same task and save the complete JSON response. This blocking wait is the default:

runapi wait "$task_id" --service flux-2 --action <operation> > result.json

Only when the user explicitly asks for background execution, polling, or webhook integration may you stop after validating task.json. Report the task id and do not claim that the deliverable is complete.

Verify

A success status is not the deliverable. Read and validate the complete response according to the discovered result contract. Preserve the complete non-media result in the exact requested format, including JSON, text, SRT, or VTT.

For every requested media deliverable listed anywhere in the response, download all of them rather than returning only the first URL. Before downloading, derive its expected MIME type or family from response metadata when present, then the selected output format, then an unambiguous result field such as videos, images, or audios in the API Reference. The Catalog-declared fallback families for this skill are image/*. Stop only when no single expected type or family can be established from those sources.

For every downloaded file, require both a non-empty file and the expected MIME type or family:

curl --fail --location <deliverable-url> --output <downloaded-file>
for file in <downloaded-files>; do
  expected_mime=<expected-MIME-or-family-pattern-for-this-file>
  test -s "$file"
  [[ "$(file --brief --mime-type "$file")" == $expected_mime ]]
done

Do not report completion when any requested deliverable is missing, empty, or has an unexpected MIME type. Record Skill Conformance separately from Task Outcome so a service failure does not hide whether this recipe was followed.

Recover or stop

  • Correct a request shape at most once, and only when the discovered contract or returned validation error identifies the correction.
  • Retry a transient transport failure at most once, and only when evidence confirms that no task was created, no billing occurred, and retrying is safe.
  • If waiting times out or loses transport after task.json exists, preserve the error and rerun runapi wait for that same task at most once. Never submit a replacement task.
  • On a terminal RunAPI or service failure, preserve the task/error evidence and stop. Keep the selected model and capability, and do not submit another paid request without user authorization.
  • If the contract is missing a fact required to build or verify the request, stop and report the contract gap. Do not turn a product defect into a permanent skill workaround.

Integrate with SDK

Use this route only for application or production-code integration. Open the current RunAPI SDK reference below, select the package for the target language and Flux 2, and confirm its install command, client methods, request types, response types, and error classes before coding. Build the request from the same discovered product contract and apply the same deliverable verification and stop rules. Do not invoke runapi as a subprocess from production code.

References

Variants