← Back to Skills Marketplace
allmightysauron

Solar Cloud API

by AllMightySauron · GitHub ↗ · v1.0.0
cross-platform ⚠ suspicious
908
Downloads
0
Stars
0
Active Installs
1
Versions
Install in OpenClaw
/install solax-cloud-api
Description
Fetch inverter summary data from the Solax Cloud API using the npm package solax-cloud-api. Use when the user provides (or has configured) a Solax tokenId and inverter serial number (sn) and wants current/summary energy data returned as JSON (typed as SolaxSummary) for dashboards/automation.
Usage Guidance
This skill appears to do what it says: use the solax-cloud-api npm package to fetch an inverter summary. Before installing or running it: 1) Verify and provide SOLAX_TOKENID and SOLAX_SN only via environment variables or secure vaults (do not paste tokens into chat). 2) Inspect the solax-cloud-api package (and its dependencies) from the npm registry before running npm install, and consider pinning/locking versions to avoid unexpected transitive packages. 3) Run npm install in a contained environment (build sandbox or CI runner) if you’re unsure. 4) Be aware the script emits the inverter serial (sn) in error output unredacted — if that is sensitive for you, modify the script to redact it. 5) Consider asking the publisher to update registry metadata to declare the required env vars and to include a lockfile to reduce supply-chain variability.
Capability Analysis
Type: OpenClaw Skill Name: solax-cloud-api Version: 1.0.0 The skill is designed to fetch Solax inverter summary data using the `solax-cloud-api` npm package. It handles sensitive inputs (`tokenId`, `sn`) securely by recommending environment variables and redacting the `tokenId` in error logs, as explicitly instructed in `SKILL.md` and implemented in `scripts/fetch_summary.mjs`. The `SKILL.md` guardrails are security-enhancing instructions for the agent, not malicious prompt injection. No evidence of data exfiltration, malicious execution, persistence, or obfuscation was found.
Capability Assessment
Purpose & Capability
The name/description, the script (fetch_summary.mjs), and package.json all align: they load [email protected] and call getAPIData() -> toSummary() to produce SolaxSummary JSON. One mismatch: registry metadata lists no required environment variables, but the runtime clearly expects SOLAX_TOKENID and SOLAX_SN (or CLI args).
Instruction Scope
SKILL.md instructs the agent to run npm install in the skill folder and then run the script with env vars or CLI args. It does not ask the agent to read unrelated files or exfiltrate data to unknown endpoints; network activity is the expected Solax Cloud API calls performed by the solax-cloud-api package. The script redacts the tokenId in error output but emits the inverter serial (sn) unredacted.
Install Mechanism
There is no automatic install spec; the skill relies on a manual `npm install` in the skill workspace. That will pull solax-cloud-api from the public npm registry (moderate trust surface). No arbitrary downloads or external URLs are used. Because the skill ships a package.json without a lockfile and instructs `npm install` (not `npm ci`), the exact transitive dependency graph can vary unless you pin/lock versions.
Credentials
The amount of secret access required is minimal and appropriate (a Solax tokenId and inverter serial). However, the registry metadata did not declare these required environment variables — a metadata mismatch that could cause surprise. Also note the script prints the serial number in error outputs unredacted (could reveal device identifiers); tokenId is redacted but still included in error JSON in a redacted form.
Persistence & Privilege
The skill does not request permanent presence (always:false), does not modify other skills or system settings, and is user-invocable only. It writes dependencies into the skill workspace only when you run npm install (manual step).
How to Use
  1. Make sure OpenClaw is installed (local or Docker)
  2. Run the install command in chat: /install solax-cloud-api
  3. After installation, invoke the skill by name or use /solax-cloud-api
  4. Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.0
Initial release of solax-summary-fetch: fetch summary data from the Solax Cloud API. - Fetches Solax inverter summary data as JSON for dashboards or automation. - Uses solax-cloud-api npm package; requires Node.js setup. - Inputs: tokenId and inverter serial number via environment variables or CLI. - Outputs a single JSON summary (SolaxSummary) or structured error JSON. - Built-in guardrails to protect secret credentials (tokenId is never logged).
Metadata
Slug solax-cloud-api
Version 1.0.0
License
All-time Installs 0
Active Installs 0
Total Versions 1
Frequently Asked Questions

What is Solar Cloud API?

Fetch inverter summary data from the Solax Cloud API using the npm package solax-cloud-api. Use when the user provides (or has configured) a Solax tokenId and inverter serial number (sn) and wants current/summary energy data returned as JSON (typed as SolaxSummary) for dashboards/automation. It is an AI Agent Skill for Claude Code / OpenClaw, with 908 downloads so far.

How do I install Solar Cloud API?

Run "/install solax-cloud-api" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.

Is Solar Cloud API free?

Yes, Solar Cloud API is completely free (open-source). You can download, install and use it at no cost.

Which platforms does Solar Cloud API support?

Solar Cloud API is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).

Who created Solar Cloud API?

It is built and maintained by AllMightySauron (@allmightysauron); the current version is v1.0.0.

💬 Comments