Ri Savings Advisor

Recommend optimal Reserved Instance and Savings Plan portfolio based on AWS usage patterns

This instruction-only advisor appears coherent and safe in design, but exercise common-sense caution: (1) Run the suggested aws CLI commands yourself in your environment and paste only the exported JSON/results — do not paste access keys, secret keys, session tokens, or other credentials. (2) Before sharing outputs, scrub any sensitive identifiers you don't want disclosed (long-lived access keys, secret values, or credentials accidentally included). (3) Note the skill author/source/homepage are not provided; if you will share sensitive cost data, consider using a vetted internal tool or performing the analysis offline. (4) The SKILL.md includes sample commands and an IAM policy for read-only data collection — that policy is a reasonable minimum if you choose to automate data export, but the skill itself does not request or use credentials.

Type: OpenClaw Skill Name: ri-savings-advisor Version: 1.0.0 The skill is classified as benign. Despite declaring `bash` as a tool, the `SKILL.md` explicitly instructs the AI agent: "This skill is instruction-only. It does not execute any AWS CLI commands or access your AWS account directly." and "Never ask for credentials, access keys, or secret keys — only exported data or CLI/console output." It also advises the agent to "confirm no credentials are included before processing" user data. These strong, explicit negative instructions mitigate any potential risk from the `bash` tool declaration, ensuring the skill functions as a data analysis tool based on user-provided input, without direct system interaction or credential handling.