Solar Cloud API

Fetch inverter summary data from the Solax Cloud API using the npm package solax-cloud-api. Use when the user provides (or has configured) a Solax tokenId and inverter serial number (sn) and wants current/summary energy data returned as JSON (typed as SolaxSummary) for dashboards/automation.

This skill appears to do what it says: use the solax-cloud-api npm package to fetch an inverter summary. Before installing or running it: 1) Verify and provide SOLAX_TOKENID and SOLAX_SN only via environment variables or secure vaults (do not paste tokens into chat). 2) Inspect the solax-cloud-api package (and its dependencies) from the npm registry before running npm install, and consider pinning/locking versions to avoid unexpected transitive packages. 3) Run npm install in a contained environment (build sandbox or CI runner) if you’re unsure. 4) Be aware the script emits the inverter serial (sn) in error output unredacted — if that is sensitive for you, modify the script to redact it. 5) Consider asking the publisher to update registry metadata to declare the required env vars and to include a lockfile to reduce supply-chain variability.

Type: OpenClaw Skill Name: solax-cloud-api Version: 1.0.0 The skill is designed to fetch Solax inverter summary data using the `solax-cloud-api` npm package. It handles sensitive inputs (`tokenId`, `sn`) securely by recommending environment variables and redacting the `tokenId` in error logs, as explicitly instructed in `SKILL.md` and implemented in `scripts/fetch_summary.mjs`. The `SKILL.md` guardrails are security-enhancing instructions for the agent, not malicious prompt injection. No evidence of data exfiltration, malicious execution, persistence, or obfuscation was found.