finops SKILL.md skillA

finops from hoangminhung/devops-ai-kit is an agent skill: a SKILL.md folder an AI agent loads when a task calls for it.

Install it, pinned
mdr add hoangminhung/devops-ai-kit/finops@git:20261028.645512f

Pins git:20261028.645512f in mdr.lock. Pin the fingerprint instead.

Audit grade
A, 17 of 17 checks passed
Kind
SKILL.md skill
Repository
hoangminhung/devops-ai-kit
Path
claude/skills/finops/SKILL.md
Versions recorded
1
Latest version
git:20261028.645512f, committed Oct 28, 2026
Size
3,639 bytes
Repository stars
5
License
MIT

Cloud cost-control standards — cost estimation gates for Terraform changes (Infracost), NAT and data-transfer costs, orphaned resources, Kubernetes right-sizing, storage and log-ingestion costs (including Azure Log Analytics), and non-production savings. Use whenever a change adds or resizes cloud resources, when designing networking that affects data transfer, when reviewing monitoring/logging volume, or when the user asks why the bill is high or how to cut costs.

Collected from public GitHub. Every version is saved exactly as it was and never changes. Install it at an exact version with the mdr tool, and every file is checked before it reaches your agent. The main file is checked against the SHA-256 fingerprint recorded here, and the others against the fingerprints GitHub keeps for its source commit. The automatic checks below grade the latest version, and the same checks always give the same file the same grade.

What the file says

# FinOps & cost control standards

<!-- devops-ai-kit · Last reviewed: 2026-10-28 -->

## 1. Estimate before you create

- **SHOULD** Terraform changes that affect cost: run `infracost diff` and put the number (monthly increase / decrease) in the plan.
- **CONTEXT** Automatic blocking thresholds in CI (for example, an increase > 200 USD/month needs Lead / Finance approval and no auto-merge) follow the organization's policy.
- **SHOULD** Costs that are hard to see must be estimated in words if the tool cannot calculate them: data transfer, log ingestion, object storage requests, number of snapshots.

## 2. Network & data transfer

- **SHOULD** Non-prod: one shared NAT Gateway (or a NAT instance) instead of one per AZ.
- **SHOULD** For large data volumes, prefer keeping internal traffic in the same zone (topology-aware routing) to avoid cross-AZ fees.
- **SHOULD** AWS: use Gateway Endpoints for S3 / DynamoDB (free) instead of going through NAT.
- **SHOULD** Use cross-region backup / replication only when the RPO / RTO really needs it; write the cost in the ADR.

## 3. Logs & metrics (often a surprise cost)
…

Read the whole file at its exact version.

How to install

The exact contents, by fingerprint
mdr add hoangminhung/devops-ai-kit/finops@sha256:1f1976a9aeec67cf

The line at the top of this page pins the label git:20261028.645512f, which is what most people want. This one pins the sha256 fingerprint of the contents instead, so it survives a label being moved. Either way the exact version is written to mdr.lock, and mdr install downloads and checks those contents again, so it installs them exactly or stops with an error.

Badge

mdr badge

[![mdr](https://markdownregistry.com/badge/art_r2a3nrqwfy7rc2jd.svg)](https://markdownregistry.com/a/art_r2a3nrqwfy7rc2jd)

1 badge image fetches in 30 days. What the badge shows.

Versions

The registry has recorded 1 version of this file, committed on Oct 28, 2026.

versioncommittedcommitsizeaudit
git:20261028.645512f latest2026-10-28 645512f 3,639 BA view

Audit of the latest version

A  17 of 17 checks passed. Fixed automatic checks with no AI involved, so the same checks give the same answer every run.
  • pass: Frontmatter block present
  • pass: Frontmatter declares a name
  • pass: Frontmatter declares a description
  • pass: Size between 200 bytes and 200 KB (3639 bytes)
  • pass: No zero-width or bidi control characters
  • pass: No instruction hidden inside an HTML comment
  • pass: No link to an exfiltration or paste host
  • pass: No credential-shaped string
  • pass: No instruction to send local credentials anywhere
  • pass: No text hidden with inline styles
  • pass: No prompt-injection phrasing
  • pass: No curl or wget piped into a shell
  • pass: No recursive delete of root, home or parent
  • pass: No instruction to read or print local credentials
  • pass: No base64 blob over 200 characters
  • pass: No link to a raw IP address
  • pass: No script tag

Source

GitHub

hoangminhung/devops-ai-kit · 5 stars · license MIT · pushed 2026-11-03 · branch main

API

GET https://markdownregistry.com/api/v1/artifacts/art_r2a3nrqwfy7rc2jd
GET https://markdownregistry.com/api/v1/resolve?ref=hoangminhung/devops-ai-kit/finops
GET https://markdownregistry.com/api/v1/blob/1f1976a9aeec67cf9d53e7b0ed8c30c0472ff8e26097f842f6c0da01b504ba2a

Your AI assistant does the legwork. You hear about the deals worth your word. Hand yours the standing instructions at modelranch.com and it joins the network that reads files like this one.

Guides: the SKILL.md format and its required fields · what to check before you install a skill · how to pin a skill to an exact version · where to find agent skills · keeping a team on the same skills · which agent file does what.

More from hoangminhung/devops-ai-kit

cloud-platforms SKILL.md skill
hoangminhung/devops-ai-kit · claude/skills/cloud-platforms/SKILL.md · Design standards for cloud and on-prem infrastructure — Azure, AWS, GCP, Hetzner, OVHcloud and bare-metal data centers…
git:20261028.645512f · audit A · 5 stars
container-supply-chain SKILL.md skill
hoangminhung/devops-ai-kit · claude/skills/container-supply-chain/SKILL.md · Container and software supply-chain security in CI/CD — vulnerability scanning gates with Trivy or Grype, SBOM…
git:20261028.645512f · audit A · 5 stars
db-reliability SKILL.md skill
hoangminhung/devops-ai-kit · claude/skills/db-reliability/SKILL.md · Database reliability engineering standards for PostgreSQL (and MySQL) on Kubernetes — zero-downtime schema changes with…
git:20261028.645512f · audit A · 5 stars
disaster-recovery SKILL.md skill
hoangminhung/devops-ai-kit · claude/skills/disaster-recovery/SKILL.md · Backup and disaster-recovery standards — defining RTO/RPO, 3-2-1 and offsite copies, immutable backups (S3 Object Lock…
git:20261028.645512f · audit A · 5 stars
grill-me SKILL.md skill
hoangminhung/devops-ai-kit · claude/skills/grill-me/SKILL.md · Interview the user in short rounds to fill in missing context before acting — goal, scope, target environment…
git:20261028.34f57d4 · audit A · 5 stars
infra-docs SKILL.md skill
hoangminhung/devops-ai-kit · claude/skills/infra-docs/SKILL.md · Write infrastructure documentation based on real evidence — change records of what was changed and why…
git:20261101.e2f12a4 · audit A · 5 stars
infra-rulebook SKILL.md skill
hoangminhung/devops-ai-kit · claude/skills/infra-rulebook/SKILL.md · Map an infrastructure repo's files to the devops-ai-kit technology rules (Terraform, Ansible, Kubernetes, Helm, Argo…
git:20261031.84caac1 · audit A · 5 stars
infra-scout SKILL.md skill
hoangminhung/devops-ai-kit · claude/skills/infra-scout/SKILL.md · Onboard an infrastructure repo — read its Terraform (folders, backends, workspaces, provider versions), Helm charts and…
git:20261103.8a00cbc · audit B · 5 stars
infra-task SKILL.md skill
hoangminhung/devops-ai-kit · claude/skills/infra-task/SKILL.md · Run a risky infrastructure change end-to-end — recon of the live state, version research, a written plan, independent…
git:20261101.756f384 · audit A · 5 stars
k8s-networking SKILL.md skill
hoangminhung/devops-ai-kit · claude/skills/k8s-networking/SKILL.md · Kubernetes networking standards — Gateway API versus Ingress, migrating off the retired ingress-nginx controller…
git:20261028.645512f · audit A · 5 stars
k8s-storage SKILL.md skill
hoangminhung/devops-ai-kit · claude/skills/k8s-storage/SKILL.md · Kubernetes storage standards — choosing CSI drivers and access modes, StorageClass settings (reclaim policy, binding…
git:20261028.645512f · audit A · 5 stars
pki-secrets SKILL.md skill
hoangminhung/devops-ai-kit · claude/skills/pki-secrets/SKILL.md · Certificate, secret and access-management standards — cert-manager with ACME (HTTP-01/DNS-01) or Vault PKI…
git:20261101.8158acd · audit A · 5 stars

Every file in hoangminhung/devops-ai-kit

Other files named finops

finops SKILL.md skill
nitinjain999/platform-skills · skills/finops/SKILL.md · Cost visibility and tag governance for platform changes. Estimates the monthly cost of a Terraform pull request with…
git:20261011.e8166a5 · audit A · 71 stars
finops SKILL.md skill
nitinjain999/platform-skills · plugins/platform-skills/skills/finops/SKILL.md · Cost visibility and tag governance for platform changes. Estimates the monthly cost of a Terraform pull request with…
git:20261018.90b97a9 · audit A · 71 stars
finops SKILL.md skill
tekkiiiii/the-agency · skills/finops/SKILL.md · Use for cloud cost work on AWS/GCP/Azure: "why is our cloud bill so high", idle-resource audits, Reserved Instance vs…
git:20261026.c4135d4 · audit A · 7 stars

Browse by kind, by grade A, or by owner.