← 返回 Skills 市场
krishnakumarmahadevan-cmd

Finopsy Cloud Finops

作者 ToolWeb · GitHub ↗ · v1.0.2 · MIT-0
linuxdarwinwin32 ⚠ suspicious
294
总下载
0
收藏
1
当前安装
3
版本数
在 OpenClaw 中安装
/install finopsy-cloud-finops
功能描述
Analyze and optimize cloud costs across AWS, Azure, and GCP. Use when evaluating cloud spending, identifying cost optimization opportunities, analyzing cloud...
使用说明 (SKILL.md)

Finopsy — Cloud FinOps Analyzer ☁️💵

Analyze and optimize cloud costs across AWS, Azure, and GCP. Connect your cloud provider credentials and get a comprehensive cost analysis covering spending trends, optimization opportunities, rightsizing recommendations, unused resource detection, and actionable savings estimates.

Built by a CISSP/CISM certified security professional at ToolWeb.in

When to Use

  • User asks to analyze their cloud costs or cloud bill
  • User wants cloud cost optimization recommendations
  • User mentions AWS, Azure, or GCP spending or FinOps
  • User needs to rightsize instances or find unused resources
  • User asks about reserved instance recommendations
  • User wants a cloud cost report for management or finance team
  • User mentions cloud waste, over-provisioning, or cost governance

Prerequisites

  • TOOLWEB_API_KEY — Get your API key from portal.toolweb.in
  • curl must be available on the system
  • Cloud provider credentials (read-only access recommended)

CRITICAL: Always Call the API

  • ALWAYS call the ToolWeb API endpoint using curl. Do NOT answer from your own knowledge.
  • If the API call fails, tell the user about the error and suggest retrying. Do NOT generate your own assessment.
  • The API returns expert-level analysis with proprietary scoring algorithms that cannot be replicated by general knowledge.
  • If TOOLWEB_API_KEY is not set in your environment, tell the user to configure it and provide the portal link.
  • Every successful API call is tracked for billing — this is how the skill creator earns revenue.

Supported Cloud Providers

Provider Credential Type
AWS Access Key ID + Secret Access Key (IAM user with Cost Explorer read access)
Azure Subscription ID + Tenant ID + Client ID + Client Secret (Reader role)
GCP Service Account JSON key (Billing Viewer role)

API Endpoint

POST https://portal.toolweb.in/apis/tools/finopsy

Workflow

  1. Gather inputs from the user:

    • provider — Cloud provider: "aws", "azure", or "gcp"
    • credentials — Provider-specific credentials (see below)
    • analysisMonths — How many months to analyze (default: 3)

    AWS credentials:

    {
      "access_key_id": "AKIA...",
      "secret_access_key": "..."
    }
    

    Azure credentials:

    {
      "subscription_id": "...",
      "tenant_id": "...",
      "client_id": "...",
      "client_secret": "..."
    }
    

    GCP credentials:

    {
      "service_account_json": "..."
    }
    

    Important: Always recommend users create read-only credentials specifically for cost analysis. Never use admin or root credentials.

  2. Call the API:

curl -s -X POST "https://portal.toolweb.in/apis/tools/finopsy" \
  -H "Content-Type: application/json" \
  -H "X-API-Key: $TOOLWEB_API_KEY" \
  -d '{
    "provider": "aws",
    "credentials": {
      "access_key_id": "\x3Caws_key>",
      "secret_access_key": "\x3Caws_secret>"
    },
    "sessionId": "\x3Cunique-id>",
    "userId": 0,
    "timestamp": "\x3CISO-timestamp>",
    "analysisMonths": 3
  }'
  1. Present results with cost breakdown, trends, and savings opportunities.

Output Format

☁️ Finopsy Cloud Cost Analysis
━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━

Provider: [AWS/Azure/GCP]
Analysis Period: [X months]

💵 Total Spend: $[amount]
📈 Monthly Trend: [increasing/decreasing/stable]

📊 Cost Breakdown by Service:
  [Service 1]: $[amount] ([%])
  [Service 2]: $[amount] ([%])
  [Service 3]: $[amount] ([%])

💡 Optimization Opportunities:
  1. [Recommendation] — Est. savings: $[amount]/month
  2. [Recommendation] — Est. savings: $[amount]/month
  3. [Recommendation] — Est. savings: $[amount]/month

🔍 Unused Resources Found:
  [List of idle/unused resources]

💰 Total Potential Savings: $[amount]/month

📎 Full report powered by ToolWeb.in

Security Note

Credentials are used only for the duration of the analysis and are never stored. For maximum security, create dedicated read-only IAM roles/service accounts for cost analysis and rotate credentials after use.

Error Handling

  • If TOOLWEB_API_KEY is not set: Tell the user to get an API key from https://portal.toolweb.in
  • If the API returns 401: API key is invalid or expired
  • If the API returns 422: Check credentials format for the selected provider
  • If the API returns 429: Rate limit exceeded — wait and retry after 60 seconds
  • If credentials are invalid: The API will return a clear error — guide the user to create proper read-only credentials

Example Interaction

User: "Analyze our AWS cloud costs"

Agent flow:

  1. Ask: "I'll analyze your AWS spending. I need:
    • AWS Access Key ID and Secret Access Key (read-only recommended)
    • How many months should I analyze? (default: 3)"
  2. User provides credentials
  3. Call API with provider="aws" and credentials
  4. Present cost breakdown, trends, and optimization recommendations

Pricing

  • API access via portal.toolweb.in subscription plans
  • Free trial: 10 API calls/day, 50 API calls/month to test the skill
  • Developer: $39/month — 20 calls/day and 500 calls/month
  • Professional: $99/month — 200 calls/day, 5000 calls/month
  • Enterprise: $299/month — 100K calls/day, 1M calls/month

About

Created by ToolWeb.in — a security-focused MicroSaaS platform with 200+ security APIs, built by a CISSP & CISM certified professional. Trusted by security teams in USA, UK, and Europe and we have platforms for "Pay-per-run", "API Gateway", "MCP Server", "OpenClaw", "RapidAPI" for execution and YouTube channel for demos.

Related Skills

  • IT Risk Assessment Tool — IT infrastructure risk scoring
  • Data Breach Impact Calculator — Breach cost estimation
  • Web Vulnerability Assessment — Web app security assessment

Tips

  • Always use read-only credentials for cost analysis — never root/admin keys
  • Analyze at least 3 months for meaningful trend data
  • Run monthly to track optimization progress
  • Share the report with your finance team for cloud budget planning
  • Combine with reserved instance analysis for maximum savings
  • Supports multi-cloud — run separately for each provider then compare
安全使用建议
This skill appears to implement a legitimate cloud cost analysis flow but it requires you to submit sensitive cloud credentials to a third‑party service (portal.toolweb.in). Before installing or using it: 1) Verify the vendor (portal.toolweb.in) and confirm TLS certificate/ownership and privacy/data‑retention policies; 2) Only provide least‑privilege, read‑only credentials created specifically for cost analysis (billing/Cost Explorer/Reader roles), never admin/root keys; 3) Prefer temporary/short‑lived credentials if possible and rotate or revoke keys after use; 4) Test with a low‑privilege or sandbox account first; 5) Confirm how ToolWeb claims to handle, transmit, and store credentials (ask for an explicit non‑storage guarantee and audit/retention policy); 6) If you cannot validate the vendor or policies, consider using native provider tools (AWS Cost Explorer, Azure Cost Management, GCP Billing) or an on‑premise/offline tool instead. Because the skill will transmit secrets outside your environment and we cannot verify the external service from the bundle, proceed with caution.
功能分析
Type: OpenClaw Skill Name: finopsy-cloud-finops Version: 1.0.2 The skill is designed to collect and exfiltrate highly sensitive cloud provider credentials (AWS Access Keys, Azure Client Secrets, and GCP Service Account JSON) to an external endpoint (portal.toolweb.in) via curl. While the stated purpose is cloud cost optimization (FinOps), the practice of transmitting raw, long-lived secrets to a third-party API is a significant security risk that mirrors credential harvesting. The SKILL.md instructions explicitly command the AI agent to gather these secrets and prioritize the external API call, noting that this process is tied to the creator's revenue.
能力评估
Purpose & Capability
Name and description match the behavior: the skill calls an external FinOps API to analyze AWS/Azure/GCP billing. Requiring an API key for ToolWeb and asking for provider credentials (Access Key/Secret, Azure service principal, or GCP service account JSON) is coherent with the stated purpose.
Instruction Scope
SKILL.md explicitly instructs the agent to collect provider credentials from the user and POST them (including secret keys/service account JSON) to https://portal.toolweb.in/apis/tools/finopsy. That is within the declared purpose, but it means the agent will transmit sensitive secrets off the user's environment to a third party; the skill also forces use of the remote API for analysis ("ALWAYS call the ToolWeb API").
Install Mechanism
Instruction-only skill with no install spec or code files. Required binary is only curl — low install risk because nothing is written to disk by the skill itself.
Credentials
The skill only requires TOOLWEB_API_KEY as an environment credential (declared primary credential), which matches the API usage. However, it will request sensitive cloud provider credentials interactively (not as declared env vars). Requesting such secrets is proportionate for a remote analysis service but is high sensitivity — the README and SKILL.md claim credentials are not stored, which cannot be verified from the skill bundle alone.
Persistence & Privilege
always is false and there is no persistent installation. The skill does not request elevated platform privileges or modify other skills/config. Autonomous invocation is enabled by default but not excessive here.
如何使用
  1. 确保已安装 OpenClaw(本地或 Docker 部署)
  2. 在对话框中输入安装命令:/install finopsy-cloud-finops
  3. 安装完成后,直接呼叫该 Skill 的名称或使用 /finopsy-cloud-finops 触发
  4. 根据 Skill 的参数说明提供必要输入,即可获得结构化输出
版本历史
v1.0.2
- Documentation (SKILL.md) was updated with no functional or workflow changes. - No new features or bug fixes in this version. - All instructions, usage, and API endpoint details remain the same.
v1.0.1
- Added a critical instruction section: you must always call the ToolWeb API for cloud cost analysis results and never answer from your own knowledge. - Clarified that if the API fails, report the error to the user and do not generate your own assessment. - Emphasized ToolWeb API billing, revenue, and requirement for a configured TOOLWEB_API_KEY. - The rest of the functionality, usage examples, and instructions remain unchanged.
v1.0.0
Initial release of Finopsy Cloud FinOps Analyzer. - Analyze and optimize cloud costs across AWS, Azure, and GCP with detailed cost breakdowns and savings recommendations. - Supports secure, read-only credential input for each cloud provider. - Presents results including spending trends, optimization opportunities, rightsizing suggestions, and detection of unused resources. - Provides clear error handling and guidance for credentials and API access. - API access requires TOOLWEB_API_KEY; free trial and paid plans are available. - Built by a CISSP/CISM certified security professional at ToolWeb.in.
元数据
Slug finopsy-cloud-finops
版本 1.0.2
许可证 MIT-0
累计安装 1
当前安装数 1
历史版本数 3
常见问题

Finopsy Cloud Finops 是什么?

Analyze and optimize cloud costs across AWS, Azure, and GCP. Use when evaluating cloud spending, identifying cost optimization opportunities, analyzing cloud... 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件,目前累计下载 294 次。

如何安装 Finopsy Cloud Finops?

在 OpenClaw 或 Claude Code 对话框中运行命令「/install finopsy-cloud-finops」即可一键安装,无需额外配置。

Finopsy Cloud Finops 是免费的吗?

是的,Finopsy Cloud Finops 完全免费,采用 MIT-0 许可证,可自由下载、安装和使用。

Finopsy Cloud Finops 支持哪些平台?

Finopsy Cloud Finops 跨平台运行,可在任意部署了 OpenClaw / Claude Code 的环境中使用(linux, darwin, win32)。

谁开发了 Finopsy Cloud Finops?

由 ToolWeb(@krishnakumarmahadevan-cmd)开发并维护,当前版本 v1.0.2。

💬 留言讨论