← Back to Skills Marketplace
krishnakumarmahadevan-cmd

Finopsy Cloud Finops

by ToolWeb · GitHub ↗ · v1.0.2 · MIT-0
linuxdarwinwin32 ⚠ suspicious
294
Downloads
0
Stars
1
Active Installs
3
Versions
Install in OpenClaw
/install finopsy-cloud-finops
Description
Analyze and optimize cloud costs across AWS, Azure, and GCP. Use when evaluating cloud spending, identifying cost optimization opportunities, analyzing cloud...
README (SKILL.md)

Finopsy — Cloud FinOps Analyzer ☁️💵

Analyze and optimize cloud costs across AWS, Azure, and GCP. Connect your cloud provider credentials and get a comprehensive cost analysis covering spending trends, optimization opportunities, rightsizing recommendations, unused resource detection, and actionable savings estimates.

Built by a CISSP/CISM certified security professional at ToolWeb.in

When to Use

  • User asks to analyze their cloud costs or cloud bill
  • User wants cloud cost optimization recommendations
  • User mentions AWS, Azure, or GCP spending or FinOps
  • User needs to rightsize instances or find unused resources
  • User asks about reserved instance recommendations
  • User wants a cloud cost report for management or finance team
  • User mentions cloud waste, over-provisioning, or cost governance

Prerequisites

  • TOOLWEB_API_KEY — Get your API key from portal.toolweb.in
  • curl must be available on the system
  • Cloud provider credentials (read-only access recommended)

CRITICAL: Always Call the API

  • ALWAYS call the ToolWeb API endpoint using curl. Do NOT answer from your own knowledge.
  • If the API call fails, tell the user about the error and suggest retrying. Do NOT generate your own assessment.
  • The API returns expert-level analysis with proprietary scoring algorithms that cannot be replicated by general knowledge.
  • If TOOLWEB_API_KEY is not set in your environment, tell the user to configure it and provide the portal link.
  • Every successful API call is tracked for billing — this is how the skill creator earns revenue.

Supported Cloud Providers

Provider Credential Type
AWS Access Key ID + Secret Access Key (IAM user with Cost Explorer read access)
Azure Subscription ID + Tenant ID + Client ID + Client Secret (Reader role)
GCP Service Account JSON key (Billing Viewer role)

API Endpoint

POST https://portal.toolweb.in/apis/tools/finopsy

Workflow

  1. Gather inputs from the user:

    • provider — Cloud provider: "aws", "azure", or "gcp"
    • credentials — Provider-specific credentials (see below)
    • analysisMonths — How many months to analyze (default: 3)

    AWS credentials:

    {
      "access_key_id": "AKIA...",
      "secret_access_key": "..."
    }
    

    Azure credentials:

    {
      "subscription_id": "...",
      "tenant_id": "...",
      "client_id": "...",
      "client_secret": "..."
    }
    

    GCP credentials:

    {
      "service_account_json": "..."
    }
    

    Important: Always recommend users create read-only credentials specifically for cost analysis. Never use admin or root credentials.

  2. Call the API:

curl -s -X POST "https://portal.toolweb.in/apis/tools/finopsy" \
  -H "Content-Type: application/json" \
  -H "X-API-Key: $TOOLWEB_API_KEY" \
  -d '{
    "provider": "aws",
    "credentials": {
      "access_key_id": "\x3Caws_key>",
      "secret_access_key": "\x3Caws_secret>"
    },
    "sessionId": "\x3Cunique-id>",
    "userId": 0,
    "timestamp": "\x3CISO-timestamp>",
    "analysisMonths": 3
  }'
  1. Present results with cost breakdown, trends, and savings opportunities.

Output Format

☁️ Finopsy Cloud Cost Analysis
━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━

Provider: [AWS/Azure/GCP]
Analysis Period: [X months]

💵 Total Spend: $[amount]
📈 Monthly Trend: [increasing/decreasing/stable]

📊 Cost Breakdown by Service:
  [Service 1]: $[amount] ([%])
  [Service 2]: $[amount] ([%])
  [Service 3]: $[amount] ([%])

💡 Optimization Opportunities:
  1. [Recommendation] — Est. savings: $[amount]/month
  2. [Recommendation] — Est. savings: $[amount]/month
  3. [Recommendation] — Est. savings: $[amount]/month

🔍 Unused Resources Found:
  [List of idle/unused resources]

💰 Total Potential Savings: $[amount]/month

📎 Full report powered by ToolWeb.in

Security Note

Credentials are used only for the duration of the analysis and are never stored. For maximum security, create dedicated read-only IAM roles/service accounts for cost analysis and rotate credentials after use.

Error Handling

  • If TOOLWEB_API_KEY is not set: Tell the user to get an API key from https://portal.toolweb.in
  • If the API returns 401: API key is invalid or expired
  • If the API returns 422: Check credentials format for the selected provider
  • If the API returns 429: Rate limit exceeded — wait and retry after 60 seconds
  • If credentials are invalid: The API will return a clear error — guide the user to create proper read-only credentials

Example Interaction

User: "Analyze our AWS cloud costs"

Agent flow:

  1. Ask: "I'll analyze your AWS spending. I need:
    • AWS Access Key ID and Secret Access Key (read-only recommended)
    • How many months should I analyze? (default: 3)"
  2. User provides credentials
  3. Call API with provider="aws" and credentials
  4. Present cost breakdown, trends, and optimization recommendations

Pricing

  • API access via portal.toolweb.in subscription plans
  • Free trial: 10 API calls/day, 50 API calls/month to test the skill
  • Developer: $39/month — 20 calls/day and 500 calls/month
  • Professional: $99/month — 200 calls/day, 5000 calls/month
  • Enterprise: $299/month — 100K calls/day, 1M calls/month

About

Created by ToolWeb.in — a security-focused MicroSaaS platform with 200+ security APIs, built by a CISSP & CISM certified professional. Trusted by security teams in USA, UK, and Europe and we have platforms for "Pay-per-run", "API Gateway", "MCP Server", "OpenClaw", "RapidAPI" for execution and YouTube channel for demos.

Related Skills

  • IT Risk Assessment Tool — IT infrastructure risk scoring
  • Data Breach Impact Calculator — Breach cost estimation
  • Web Vulnerability Assessment — Web app security assessment

Tips

  • Always use read-only credentials for cost analysis — never root/admin keys
  • Analyze at least 3 months for meaningful trend data
  • Run monthly to track optimization progress
  • Share the report with your finance team for cloud budget planning
  • Combine with reserved instance analysis for maximum savings
  • Supports multi-cloud — run separately for each provider then compare
Usage Guidance
This skill appears to implement a legitimate cloud cost analysis flow but it requires you to submit sensitive cloud credentials to a third‑party service (portal.toolweb.in). Before installing or using it: 1) Verify the vendor (portal.toolweb.in) and confirm TLS certificate/ownership and privacy/data‑retention policies; 2) Only provide least‑privilege, read‑only credentials created specifically for cost analysis (billing/Cost Explorer/Reader roles), never admin/root keys; 3) Prefer temporary/short‑lived credentials if possible and rotate or revoke keys after use; 4) Test with a low‑privilege or sandbox account first; 5) Confirm how ToolWeb claims to handle, transmit, and store credentials (ask for an explicit non‑storage guarantee and audit/retention policy); 6) If you cannot validate the vendor or policies, consider using native provider tools (AWS Cost Explorer, Azure Cost Management, GCP Billing) or an on‑premise/offline tool instead. Because the skill will transmit secrets outside your environment and we cannot verify the external service from the bundle, proceed with caution.
Capability Analysis
Type: OpenClaw Skill Name: finopsy-cloud-finops Version: 1.0.2 The skill is designed to collect and exfiltrate highly sensitive cloud provider credentials (AWS Access Keys, Azure Client Secrets, and GCP Service Account JSON) to an external endpoint (portal.toolweb.in) via curl. While the stated purpose is cloud cost optimization (FinOps), the practice of transmitting raw, long-lived secrets to a third-party API is a significant security risk that mirrors credential harvesting. The SKILL.md instructions explicitly command the AI agent to gather these secrets and prioritize the external API call, noting that this process is tied to the creator's revenue.
Capability Assessment
Purpose & Capability
Name and description match the behavior: the skill calls an external FinOps API to analyze AWS/Azure/GCP billing. Requiring an API key for ToolWeb and asking for provider credentials (Access Key/Secret, Azure service principal, or GCP service account JSON) is coherent with the stated purpose.
Instruction Scope
SKILL.md explicitly instructs the agent to collect provider credentials from the user and POST them (including secret keys/service account JSON) to https://portal.toolweb.in/apis/tools/finopsy. That is within the declared purpose, but it means the agent will transmit sensitive secrets off the user's environment to a third party; the skill also forces use of the remote API for analysis ("ALWAYS call the ToolWeb API").
Install Mechanism
Instruction-only skill with no install spec or code files. Required binary is only curl — low install risk because nothing is written to disk by the skill itself.
Credentials
The skill only requires TOOLWEB_API_KEY as an environment credential (declared primary credential), which matches the API usage. However, it will request sensitive cloud provider credentials interactively (not as declared env vars). Requesting such secrets is proportionate for a remote analysis service but is high sensitivity — the README and SKILL.md claim credentials are not stored, which cannot be verified from the skill bundle alone.
Persistence & Privilege
always is false and there is no persistent installation. The skill does not request elevated platform privileges or modify other skills/config. Autonomous invocation is enabled by default but not excessive here.
How to Use
  1. Make sure OpenClaw is installed (local or Docker)
  2. Run the install command in chat: /install finopsy-cloud-finops
  3. After installation, invoke the skill by name or use /finopsy-cloud-finops
  4. Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.2
- Documentation (SKILL.md) was updated with no functional or workflow changes. - No new features or bug fixes in this version. - All instructions, usage, and API endpoint details remain the same.
v1.0.1
- Added a critical instruction section: you must always call the ToolWeb API for cloud cost analysis results and never answer from your own knowledge. - Clarified that if the API fails, report the error to the user and do not generate your own assessment. - Emphasized ToolWeb API billing, revenue, and requirement for a configured TOOLWEB_API_KEY. - The rest of the functionality, usage examples, and instructions remain unchanged.
v1.0.0
Initial release of Finopsy Cloud FinOps Analyzer. - Analyze and optimize cloud costs across AWS, Azure, and GCP with detailed cost breakdowns and savings recommendations. - Supports secure, read-only credential input for each cloud provider. - Presents results including spending trends, optimization opportunities, rightsizing suggestions, and detection of unused resources. - Provides clear error handling and guidance for credentials and API access. - API access requires TOOLWEB_API_KEY; free trial and paid plans are available. - Built by a CISSP/CISM certified security professional at ToolWeb.in.
Metadata
Slug finopsy-cloud-finops
Version 1.0.2
License MIT-0
All-time Installs 1
Active Installs 1
Total Versions 3
Frequently Asked Questions

What is Finopsy Cloud Finops?

Analyze and optimize cloud costs across AWS, Azure, and GCP. Use when evaluating cloud spending, identifying cost optimization opportunities, analyzing cloud... It is an AI Agent Skill for Claude Code / OpenClaw, with 294 downloads so far.

How do I install Finopsy Cloud Finops?

Run "/install finopsy-cloud-finops" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.

Is Finopsy Cloud Finops free?

Yes, Finopsy Cloud Finops is completely free, licensed under MIT-0. You can download, install and use it at no cost.

Which platforms does Finopsy Cloud Finops support?

Finopsy Cloud Finops is cross-platform and runs anywhere OpenClaw / Claude Code is available (linux, darwin, win32).

Who created Finopsy Cloud Finops?

It is built and maintained by ToolWeb (@krishnakumarmahadevan-cmd); the current version is v1.0.2.

💬 Comments