Finops Report

PassAudited by ClawScan on May 1, 2026.

Overview

This instruction-only skill is coherent for generating AWS cost reports, with only a minor note that it declares bash availability without specific command limits.

This appears safe to install as a reporting prompt. Use it with the specific AWS billing, budget, and team-mapping data you intend to analyze, and avoid granting broad local or AWS account access unless you have reviewed the exact action being taken.

Findings (1)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

Low

#ASI02: Tool Misuse and Exploitation

What this means

If the agent chooses to use bash while preparing the report, it could potentially read or process local files unless the user keeps the task scoped.

Why it was flagged

The skill makes a shell tool available, but the rest of the artifact only describes report generation and does not specify commands, privileged operations, or automatic execution.

Skill content

tools: claude, bash

Recommendation

Only provide the intended AWS billing or budget exports, and review any proposed shell commands before allowing them to run.