Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add costory-io/costory-finops-mcp-skills --skill recipesgit clone --depth 1 https://github.com/costory-io/costory-finops-mcp-skillsWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/costory-io/costory-finops-mcp-skills/recipes)<a href="https://agentmods.dev/skills/costory-io/costory-finops-mcp-skills/recipes"><img src="https://agentmods.dev/badge/skills/costory-io/costory-finops-mcp-skills/recipes/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/costory-io/costory-finops-mcp-skills/recipes"><img src="https://agentmods.dev/badge/skills/costory-io/costory-finops-mcp-skills/recipes.svg" alt="Reviewed on agentmods" width="80" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00236 | $0.03082 |
| Opus 5.5 | $0.00094 | $0.01233 |
| Sonnet 5.5 | $0.00047 | $0.00616 |
| Haiku 4.5 | $0.00024 | $0.00308 |
Grade A, and why
recipes scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 18d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 87 lines — stays where its author put it; the contents beside it link to each section on GitHub.
Recipes
A recipe is a ready-made design for a common FinOps tracking goal — scope, split, period, widgets, delivery — as a payload skeleton, then a hand off to the mechanics skill (reports, dashboards, virtual-dimensions, query). Recipes never restate full delivery safety or live schema edge cases; fill placeholders after confirm, then build with the mechanics skill.
How to use this skill
- Match the user's goal using Pick a recipe below (triggers + "not this if").
- Read only that one file under
plugins/costory/skills/recipes/. - Run the card's Tool sequence through confirm gates — do not fire mutation/delivery tools until confirmed.
- Fill
[PLACEHOLDERS]from discovery + user answers; keep frozen fields as written. - Restate the Brief, then hand off the filled skeleton to the named mechanics skill.
- If nothing matches → fall through to
reports(or the relevant mechanics skill) and design from scratch.
Skeleton contract
Every card has:
| Section | Role |
|---|---|
| When / Audience / Outcome | routing + what "done" looks like |
| Tool sequence | ordered Costory MCP tool names (discover → confirm → preview → create) |
| Payload skeleton | JSON-shaped dashboardContext or reportContext / widgets / optional query with frozen defaults + [PLACEHOLDERS] |
| Confirm before build | gates that must be answered before preview/create/NOW/SCHEDULED |
| Gotchas | recipe-specific traps only |
| Brief | one-line restatement |
| Hand off | which mechanics skill owns the filled payload |
Placeholders are never invented: resolve via get_context, search, suggest_groupby, list_available_destinations, VDIM publish, or the user. Currency comes from get_context.
Several organizations: if get_context returns "Multiple organizations" with a list of slugs, do not pick one. Ask the user which org to use (from that list or list_organizations), then pass that slug to get_context and the following tool calls. If the user already named the org (e.g. "org acme"), use that slug directly.
What ships with it
18 files beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.
- bigquery.md 1.5 KB
- budget-vs-actual-dashboard.md 4.0 KB
- compute-drilldown-dimension.md 2.7 KB
- credits-ytd-explore.md 2.5 KB
- ec2-cost-spike-alert.md 3.2 KB
- env-costs-cto.md 2.9 KB
- explain-chart-slice.md 5.5 KB
- explain-period-change.md 6.1 KB
- gcp-spend-cud.md 12 KB
- index.json 4.3 KB
- marketplace-spend.md 2.3 KB
- namespace-cost.md 2.4 KB
- prod-vs-rnd-explore.md 2.7 KB
- prod-vs-rnd-vdim.md 3.2 KB
- provider-credits.md 2.5 KB
- reallocate-by-external-metric.md 4.8 KB
- service-cost-weekly.md 3.2 KB
- untagged-coverage.md 4.8 KB
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 18d ago Changed · +2 lines 1eab775d69d6
- 29d ago Changed · +2 lines · +13 tokens per session 7146dd6e400c
- 1mo ago Changed · +2 lines · +10 tokens per session 5dd11f52b238
- 1mo ago Changed · +2 lines · -3 tokens per session acb4d0e7f3d4
- 1mo ago First seen · 79 lines · 216 tokens per session scan A 2c7a44814c0e
recipes is a skill published in the GitHub repository costory-io/costory-finops-mcp-skills (2 stars, last pushed 6d ago), licensed Apache-2.0. It adds 236 tokens to every session and 3,082 once invoked, about $0.0009 per session on Opus 5.5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.
Other skills, from other repositories
finops-expert
Expert-level cloud financial operations, cost optimization, and cloud economics. Use when the user mentions cloud cost, optimization, cloud economics, or AWS cost, or when the task involves FinOps Fundamentals, Cost Management, FinOps Practices, or Cost Visibility.
cost-check
Estimate the monthly cost of a Pulumi or Terraform project with the FinFocus CLI, flag expensive resources, cost increases, and total cost against thresholds in .cost-check.yml, and write a COSTCHECK.md report. Reads machine-readable JSON, checks the CLI version, and names what to do when the CLI, a plugin…
cost-drift
Compare actual and projected spend for a Pulumi stack with the FinFocus CLI, flag drifting resources against thresholds in .cost-check.yml, explain likely causes, track the trend, and write a COSTDRIFT.md report. Reads machine-readable JSON, checks the CLI version, and names what to do when the CLI, a billing plugin…
gcp-spend-cap-setup
Use to set up Google Cloud hard spend caps (Public Preview, July 2026) with guided discovery, sizing, and post-creation verification. Spend caps are console-only — this skill prepares everything, walks you through the one manual step, and verifies the result. GUIDED — runs only read-only commands. Triggers on "set up…
ovh
OVHcloud infrastructure integration for managing instances, Kubernetes clusters, networks, and object storage via CLI and Terraform.
scaleway
Scaleway cloud integration for managing instances, Kapsule Kubernetes clusters, object storage, and managed databases via CLI and Terraform.