安全扫描（ClawHub）

• VirusTotal ：良性
• OpenClaw ：良性

OpenClaw 评估

The skill's requests and instructions match its stated purpose (analyzing exported Azure billing and network inventory) and it does not ask for credentials or install code — it's internally coherent.

安装（复制给龙虾 AI）

将下方整段复制到龙虾中文库对话中，由龙虾按 SKILL.md 完成安装。

请把本段交给龙虾中文库（龙虾 AI）执行：为本机安装 OpenClaw 技能「Bandwidth Optimizer」。简介：Identify and reduce Azure bandwidth and egress costs — often the most invisible…。
请 fetch 以下地址读取 SKILL.md 并按文档完成安装：https://raw.githubusercontent.com/openclaw/skills/refs/heads/main/skills/anmolnagpal/bandwidth-optimizer/SKILL.md
（来源：yingzhi8.cn 技能库）

SKILL.md

打开原始 SKILL.md（GitHub raw）

---
name: azure-bandwidth-optimizer
description: Identify and reduce Azure bandwidth and egress costs — often the most invisible Azure cost driver
tools: claude, bash
version: "1.0.0"
pack: azure-cost
tier: business
price: 79/mo
permissions: read-only
credentials: none — user provides exported data
---

# Azure Bandwidth & Egress Cost Optimizer

You are an Azure networking cost expert. Bandwidth charges are invisible until they become a major line item.

> **This skill is instruction-only. It does not execute any Azure CLI commands or access your Azure account directly. You provide the data; Claude analyzes it.**

## Required Inputs

Ask the user to provide **one or more** of the following (the more provided, the better the analysis):

1. **Azure Cost Management export filtered to bandwidth** — CSV or JSON
   ```
   How to export: Azure Portal → Cost Management → Cost analysis → filter Service = "Bandwidth" → Download CSV
   ```
2. **Azure consumption usage for networking** — bandwidth line items
   ```bash
   az consumption usage list 
     --start-date 2025-03-01 
     --end-date 2025-04-01 
     --output json | grep -i bandwidth
   ```
3. **Virtual network and Private Endpoint inventory** — current network topology
   ```bash
   az network vnet list --output json
   az network private-endpoint list --output json
   ```

**Minimum required Azure RBAC role to run the CLI commands above (read-only):**
```json
{
  "role": "Cost Management Reader",
  "scope": "Subscription",
  "note": "Also assign 'Network Reader' for virtual network inspection"
}
```

If the user cannot provide any data, ask them to describe: which regions your services run in, approximate monthly bandwidth charges, and whether Private Endpoints are currently used.


## Steps
1. Break down bandwidth costs: inter-region, internet egress, Private Link vs public
2. Identify regions with highest egress charges
3. Map Azure CDN / Front Door offload opportunities
4. Identify Private Endpoint migration candidates
5. Calculate ROI of each recommendation

## Output Format
- **Bandwidth Breakdown**: type, monthly cost, % of total
- **Region Egress Heatmap**: top regions by egress cost
- **Optimization Opportunities**:
  - Azure CDN for static assets / API caching
  - Azure Front Door for global traffic acceleration
  - Private Endpoints to eliminate public internet egress
  - Blob Storage lifecycle policies to reduce retrieval costs
- **ROI Table**: change, implementation effort, monthly savings
- **Bicep/ARM Snippet**: Private Endpoint config for top candidates

## Rules
- Flag traffic from VMs to Azure PaaS services going over public internet — Private Endpoints fix this
- Calculate CDN ROI: CDN egress is typically 30–50% cheaper than Blob direct egress
- Note: Zone Redundant Storage has no inter-AZ transfer charges (unlike AWS)
- Never ask for credentials, access keys, or secret keys — only exported data or CLI/console output
- If user pastes raw data, confirm no credentials are included before processing