技能详情（站内镜像，无评论）
许可证：MIT-0
MIT-0 ·免费使用、修改和重新分发。无需归因。
版本：v1.0.0
统计：⭐ 0 · 723 · 0 current installs · 0 all-time installs
⭐ 0
安装量（当前） 0
🛡 VirusTotal ：良性 · OpenClaw ：可疑
Package：allmightysauron/solax-cloud-api
安全扫描（ClawHub）
- VirusTotal ：良性
- OpenClaw ：可疑
OpenClaw 评估
The skill's code and instructions match its stated purpose (fetching Solax inverter summaries), but there are small inconsistencies and a manual npm install step that you should review before trusting it.
目的
The name/description, the script (fetch_summary.mjs), and package.json all align: they load solax-cloud-api@0.2.0 and call getAPIData() -> toSummary() to produce SolaxSummary JSON. One mismatch: registry metadata lists no required environment variables, but the runtime clearly expects SOLAX_TOKENID and SOLAX_SN (or CLI args).
说明范围
SKILL.md instructs the agent to run npm install in the skill folder and then run the script with env vars or CLI args. It does not ask the agent to read unrelated files or exfiltrate data to unknown endpoints; network activity is the expected Solax Cloud API calls performed by the solax-cloud-api package. The script redacts the tokenId in error output but emits the inverter serial (sn) unredacted.
安装机制
There is no automatic install spec; the skill relies on a manual `npm install` in the skill workspace. That will pull solax-cloud-api from the public npm registry (moderate trust surface). No arbitrary downloads or external URLs are used. Because the skill ships a package.json without a lockfile and instructs `npm install` (not `npm ci`), the exact transitive dependency graph can vary unless you pin/lock versions.
证书
The amount of secret access required is minimal and appropriate (a Solax tokenId and inverter serial). However, the registry metadata did not declare these required environment variables — a metadata mismatch that could cause surprise. Also note the script prints the serial number in error outputs unredacted (could reveal device identifiers); tokenId is redacted but still included in error JSON in a redacted form.
持久
The skill does not request permanent presence (always:false), does not modify other skills or system settings, and is user-invocable only. It writes dependencies into the skill workspace only when you run npm install (manual step).
安装（复制给龙虾 AI）
将下方整段复制到龙虾中文库对话中，由龙虾按 SKILL.md 完成安装。
请把本段交给龙虾中文库（龙虾 AI）执行：为本机安装 OpenClaw 技能「Solar Cloud API」。简介：Fetch inverter summary data from the Solax Cloud API using the npm package sola…。
请 fetch 以下地址读取 SKILL.md 并按文档完成安装：https://raw.githubusercontent.com/openclaw/skills/refs/heads/main/skills/allmightysauron/solax-cloud-api/SKILL.md
（来源：yingzhi8.cn 技能库）SKILL.md
---
name: solax-summary-fetch
description: Fetch inverter summary data from the Solax Cloud API using the npm package solax-cloud-api. Use when the user provides (or has configured) a Solax tokenId and inverter serial number (sn) and wants current/summary energy data returned as JSON (typed as SolaxSummary) for dashboards/automation.
---
# solax-summary-fetch
Fetch Solax inverter summary data as JSON.
## Setup (one-time)
This skill uses Node.js and the npm package `solax-cloud-api`.
Install dependencies inside the skill folder:
```bash
cd /home/openclaw/.openclaw/workspace/skills/solax-summary-fetch/scripts
npm install
```
(We use `npm install` instead of `npm ci` because this skill does not ship with a lockfile.)
## Inputs
You need:
- `tokenId` (Solax Cloud API token id)
- `sn` (inverter serial number)
### Recommended: environment variables
Set these in your runtime (preferred so you don’t leak secrets into shell history):
- `SOLAX_TOKENID`
- `SOLAX_SN`
**Do not** hardcode credentials into the skill files.
### Alternate: CLI arguments
Pass them explicitly as:
- `--tokenId <tokenId>`
- `--sn <serial>`
## Command
```bash
cd /home/openclaw/.openclaw/workspace/skills/solax-summary-fetch/scripts
node fetch_summary.mjs --tokenId "$SOLAX_TOKENID" --sn "$SOLAX_SN"
```
## Output
- Prints a single JSON object to stdout.
- The JSON conforms to the **SolaxSummary** interface exposed by `solax-cloud-api` (see `references/solax-summary.d.ts`).
- Under the hood (solax-cloud-api v0.2.0): fetches `getAPIData()` then converts via `SolaxCloudAPI.toSummary()`.
## Guardrails
- Never print or log the tokenId beyond confirming whether it is set (redact it).
- If the API call fails, return a structured error JSON with `ok:false` and a short `error` message.