Bandwidth Optimizer
Analysis
This instruction-only Azure cost-analysis skill appears purpose-aligned, but users should be aware it asks for Azure cost and network inventory data.
Findings (2)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
Checks for instructions or behavior that redirect the agent, misuse tools, execute unexpected code, cascade across systems, exploit user trust, or continue outside the intended task.
tools: claude, bash ... az consumption usage list ... az network vnet list --output json
The skill declares bash and documents Azure CLI commands that can query cloud cost and network data. The commands are read-only and user-directed, so this is a notice rather than a concern.
Checks whether tool use, credentials, dependencies, identity, account access, or inter-agent boundaries are broader than the stated purpose.
"role": "Cost Management Reader", "scope": "Subscription", "note": "Also assign 'Network Reader' for virtual network inspection"
The skill recommends subscription-scope read-only Azure roles so the user can collect the requested data. This is aligned with bandwidth optimization, but it is broad visibility into cloud billing and topology.