Skills Explorer Add Skills

aws-billing-and-cost-management

An agent skill by aws, from aws/agent-toolkit-for-aws. Tags: analytics, cloud, cost-optimization, performance, spreadsheets.

What it does

Analyze AWS costs, find savings, manage budgets, evaluate Savings Plans and Reserved Instances, right-size EC2/Lambda/RDS/EBS with Compute Optimizer, look up service pricing, query CUR with Athena, detect cost anomalies, scope costs to billing views, and monitor Free Tier usage. Triggers on: AWS bill, cost analysis, reduce spend, savings plan, reserved instance, right-size, budget alert, cost optimization, pricing, free tier, cost anomaly, CUR, cost audit, billing view, billing view ARN.

Install

With the skills CLI, which installs into Claude Code, Codex, Cursor and other agents:

npx skills add aws/agent-toolkit-for-aws --skill aws-billing-and-cost-management

Or copy the skill folder into Claude Code's skills directory by hand (~/.claude/skills for every project, or .claude/skills inside one):

git clone --depth 1 https://github.com/aws/agent-toolkit-for-aws
cp -r agent-toolkit-for-aws/plugins/aws-core/skills/aws-billing-and-cost-management ~/.claude/skills/aws-billing-and-cost-management

Safety box score

Grade C, moderate risk: 32 of 100 risk points, rated 2026-10-15. The grade rates what the skill and its scripts can reach on the machine of whoever installs it, across eight categories from shell execution to secrets access. How the score works.

This skill is a read-heavy AWS billing and cost-optimization assistant: it queries Cost Explorer, Budgets, Compute Optimizer, CUR/Athena, Pricing, and Free Tier data. It also includes commands that can change AWS account settings and workloads, including budgets with actions, service enrollment, Lambda configuration, and VPC endpoints. Main risks are account mutation/automation and broad access to sensitive billing data; there is no opaque code or local filesystem tooling shipped with it.

Category levels, from 0 (none) to 3 (high)
CategoryLevelWhy
Code & shell execution1 (low)The skill requires shell-style AWS CLI commands and says to "Write a Python script" for calculations, but it does not ship arbitrary executables or downloaded code.
Network access2 (moderate)It sends billing/usage requests to multiple AWS APIs (`ce`, `budgets`, `compute-optimizer`, `pricing`, `athena`) and points to external docs URLs, so data leaves the machine to remote services.
Filesystem reach0 (none)No command reads, writes, or deletes local files outside the skill bundle; the examples operate through AWS APIs rather than the filesystem.
Secrets & credentials0 (none)It does not ask for passwords, API keys, `.env` files, browser sessions, or other secret stores; it assumes existing AWS credentials are already available.
Privilege & persistence2 (moderate)It can change AWS account/service settings such as `update-enrollment-status`, `create-budget`, `update-function-configuration`, and `create-vpc-endpoint`, but it does not require sudo or OS-level privileges.
Instruction hijack surface0 (none)There is no instruction to ignore higher-priority rules, hide information, or follow fetched remote instructions; the Markdown is straightforward guidance.
Irreversible actions3 (high)The skill includes live account actions and budget actions that can "Automatically apply IAM deny policies or SCPs when threshold is breached," which can change access without a fresh human check at trigger time.
Transparency0 (none)All files are plain Markdown references; there are no binaries, minified blobs, base64 payloads, or unreviewable installers.

Before installing

Rated 2026-10-15 by an automated review of 16 files from the skill's repository.

Source

Repository
aws/agent-toolkit-for-aws (all skills from this repository)
Path
plugins/aws-core/skills/aws-billing-and-cost-management/SKILL.md
Branch
main
Collection
aws-core
Updated
2026-09-19