aws-anomaly-explainer

Diagnose AWS cost anomalies and explain root cause in plain English when spend spikes unexpectedly

View Source SKILL.md

Stars

Installs

Status

ACTIVE

Visibility

PUBLIC

安装方式

直接复制以下提示词，发送给你的 AI 助手即可完成安装。

请先检查是否已安装 SkillHub 商店，若未安装，请根据 https://skillhub-1388575217.cos.ap-guangzhou.myqcloud.com/install/skillhub.md 安装 SkillHub 商店，然后安装 aws-anomaly-explainer 技能。若已安装，则直接安装 aws-anomaly-explainer 技能。

Overview

Skill Key: anmolnagpal/anomaly-explainer
Author: anmolnagpal
Source Repo: openclaw/skills
Version: 1.0.0
Source Path: skills/anmolnagpal/anomaly-explainer
Latest Commit SHA: e1c443442a0ddc4a55906680898dc6ec0204f1c8

Extracted Content

SKILL.md excerpt

# AWS Cost Anomaly Explainer

You are an AWS cost incident responder. When costs spike, diagnose root cause instantly.

## Steps
1. Parse the anomaly alert or billing diff provided
2. Identify the affected service, account, region, and time window
3. Correlate with common root causes for that service
4. Recommend immediate containment action
5. Suggest prevention measures

## Common Root Causes by Service
- **EC2**: Auto Scaling group misconfiguration, forgotten test instances, AMI copy operations
- **Lambda**: Infinite retry loops, missing DLQ, runaway event triggers
- **S3**: Unexpected GetObject traffic, replication costs, Intelligent-Tiering transition fees
- **NAT Gateway**: Application sending traffic via NAT instead of VPC Endpoint
- **RDS**: Read replica creation, snapshot export, automated backup to another region
- **Data Transfer**: Cross-region replication enabled, CloudFront cache miss spike

## Output Format
- **Root Cause**: most probable explanation in 2 sentences
- **Evidence**: what in the billing data points to this cause
- **Estimated Impact**: total $ affected
- **Containment Action**: immediate step to stop the bleeding
- **Prevention**: AWS Config rule, budget alert, or architecture change
- **Jira Ticket Body**: ready-to-paste incident ticket

## Rules
- Always state confidence level: High / Medium / Low
- If CloudTrail data is provided, correlate events with the cost spike window
- Generate a Slack-ready one-liner summary at the top

Related Claw Skills

capt-marbles

Task Router Skill

★ 0

Task Router

captchasco

captchas-openclaw

★ 0

OpenClaw integration guidance for CAPTCHAS Agent API, including OpenResponses tool schemas and plugin tool registration.

carol-gutianle

Modelready

★ 0

name: modelready description: Start using a local or Hugging Face model instantly, directly from chat. metadata: {"openclaw":{"requires":{"bins": "bash", "curl" }, "env": "URL" }}

cartoonitunes

Ethereum History

★ 0

Read-only factual data about historical Ethereum mainnet contracts. Use when the user asks about a specific contract address, early Ethereum contracts, deployment era, deployer, bytecode, decompiled code, or documented history (what a contract is and is not). Data is non-opinionated and includes runtime bytecode, decompiled code, and editorial history when available. Base URL https://ethereumhistory.com (or set BASE_URL for local/staging).

cassh100k

agent-dna

★ 0

Portable agent identity encoding. Compress SOUL.md/MEMORY.md into transferable DNA fingerprints, detect identity drift between snapshots, and port personality across platforms (OpenClaw, Claude, GPT, CrewAI). Pure Python, zero dependencies. Use when migrating agents between platforms, detecting personality drift, or backing up agent identity.

camopel

storage-cleanup

★ 0

One-command disk cleanup for macOS and Linux — trash, caches, temp files, old kernels, snap revisions, Homebrew, Docker, and Xcode artifacts. Use when user asks to free storage, clean up disk, reclaim space, reduce disk usage, or encounters low disk / "disk full" warnings. Safe by default with dry-run mode. No dependencies beyond bash and awk.