← Back to Skills Marketplace
Finops Report
by
Anmol Nagpal
· GitHub ↗
· v1.0.0
337
Downloads
0
Stars
0
Active Installs
1
Versions
Install in OpenClaw
/install finops-report
Description
Generate executive-ready monthly AWS FinOps reports with team-level chargeback and savings opportunities
README (SKILL.md)
AWS FinOps Monthly Report Generator
You are a senior AWS FinOps analyst. Generate a complete monthly cost report from billing data.
Steps
- Parse total spend, MoM delta, and per-account/team breakdown
- Identify top 5 savings opportunities with estimated $ impact
- Calculate budget vs actual variance per team/account
- Build service-level cost heatmap
- Write executive narrative + team-level action items
Output Format
Executive Summary
- Total spend, MoM trend (↑↓), % vs budget
- 3 most important things that happened this month
Cost Breakdown
- Per-team/account table: spend, budget, variance, MoM delta
- Top 5 services by spend with trend
Savings Opportunities
- Ranked table: opportunity, estimated savings/mo, effort (Low/Med/High), owner
Action Items
- Per-team bullet points (written for engineers, not finance)
Finance Summary
- Formatted for CFO/board: total, forecast, savings realized YTD
Rules
- Write two tones: technical (for engineering) and executive (for finance/board)
- Always include "savings realized this month vs last month" if historical data available
- Flag if any team exceeded budget by > 20%
- Align with FinOps FOCUS 1.2 standard terminology
Usage Guidance
This skill is missing explicit instructions about where and how to get AWS billing data and it doesn't declare the credentials it needs. Before installing or using it: (1) ask the author to specify the data source (AWS Cost & Usage Report S3 bucket or Cost Explorer API) and required, minimal-scoped credentials (ideally a read-only IAM role or short-lived credentials). (2) Do not provide long-lived root or broad AWS keys; prefer an IAM role with least privilege (Cost Explorer read-only or S3 read access to a CUR export). (3) If you must run it locally, run in a sandbox and inspect any shell commands the agent executes; restrict the agent's ability to read environment variables or ~/.aws credentials if you don't want it to access them. (4) Confirm whether the skill will prompt users for credentials vs. attempt to discover them automatically—automatic discovery of credentials on the host is a significant privacy/security risk. If the author supplies an updated SKILL.md that declares explicit data sources and required read-only credentials, this assessment could be re-evaluated as benign.
Capability Analysis
Type: OpenClaw Skill
Name: finops-report
Version: 1.0.0
The skill's metadata and instructions are entirely aligned with its stated purpose of generating AWS FinOps reports. While the skill declares `bash` as a tool, which implies shell execution capabilities, there are no instructions within SKILL.md that leverage this capability for malicious purposes, data exfiltration, unauthorized actions, or prompt injection against the agent. All instructions are focused on report generation and formatting.
Capability Assessment
Purpose & Capability
The skill's stated purpose is to generate AWS FinOps reports from billing data, but the package declares no required credentials, no config paths, and no data-source configuration. A legitimate FinOps report generator would normally require access to AWS Cost & Usage Reports, Cost Explorer API, or an S3 bucket with CUR exports and must declare how those will be supplied.
Instruction Scope
SKILL.md instructs the agent to parse billing data and historical data but does not specify where to obtain that data or how to authenticate. It also lists tools (claude, bash) that could enable the agent to run shell commands and read local files—this open-ended guidance could lead the agent to search local environment variables, config files, or other system data to find credentials or billing exports.
Install Mechanism
No install spec and no code files are present, so nothing will be written to disk during installation. This is the lowest-risk install mechanism.
Credentials
No environment variables or credentials are declared even though the task logically requires read-only AWS access to billing data. That omission is disproportionate: either the skill is incomplete, or it implicitly expects the agent to use credentials found elsewhere on the system or to prompt the user for them.
Persistence & Privilege
always is false and there is no indication the skill requests persistent or elevated privileges. Autonomous invocation is allowed (platform default) but is not by itself a red flag; combined with the credential/data-source gaps this increases the potential blast radius.
How to Use
- Make sure OpenClaw is installed (local or Docker)
- Run the install command in chat:
/install finops-report - After installation, invoke the skill by name or use
/finops-report - Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.0
- Initial release of aws-finops-report skill.
- Generates executive-ready monthly AWS FinOps reports with team-level chargeback and savings insights.
- Parses total spend, MoM trend, per-account/team breakdown, and service-level cost heatmap.
- Identifies top 5 savings opportunities with estimated monthly impact.
- Produces budget vs actual variances and highlights teams exceeding budget by 20%+.
- Includes executive summary, finance summary, and engineer-focused action items.
- Aligns reporting and terminology with FinOps FOCUS 1.2 standards.
Metadata
Frequently Asked Questions
What is Finops Report?
Generate executive-ready monthly AWS FinOps reports with team-level chargeback and savings opportunities. It is an AI Agent Skill for Claude Code / OpenClaw, with 337 downloads so far.
How do I install Finops Report?
Run "/install finops-report" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.
Is Finops Report free?
Yes, Finops Report is completely free (open-source). You can download, install and use it at no cost.
Which platforms does Finops Report support?
Finops Report is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).
Who created Finops Report?
It is built and maintained by Anmol Nagpal (@anmolnagpal); the current version is v1.0.0.
More Skills