cost-investigate

Investigate Azure cost anomalies and diagnose root causes using GitLab and Azure data.

Updated Jul 22, 2026
One-click install
npx skills add https://github.com/Trigent-Software-Pvt-Ltd/trigen-aidlc --skill cost-investigate-trigent-software-pvt-ltd
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: cost-investigate
Source: https://github.com/Trigent-Software-Pvt-Ltd/trigen-aidlc/tree/main/plugins/cost-anomalies/skills/cost-investigate
Command: npx skills add https://github.com/Trigent-Software-Pvt-Ltd/trigen-aidlc --skill cost-investigate-trigent-software-pvt-ltd

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve? Azure cost anomaly alerts tell you that spending spiked but not why, leaving engineers to manually correlate billing data with deployments, autoscaling events, and portal changes across multiple tools. ## Core Features & Use Cases - Two Investigation Modes: Look up the latest anomaly for a specific resource with its full trend history, or scan all resources with anomalies in a given month or date range. - Root Cause Diagnosis: Cross-references GitLab deployment pipelines, Azure Activity Log write operations, AKS node count metrics, and resource tags to classify anomalies as deployment-driven, autoscaler bursts, billing glitches, or configuration changes. - Knowledge Base Writeback: Writes investigation findings back to the CSV knowledge base in GitLab and can comment on linked Jira issues, building an annotated history of recurring anomalies. - Use Case: A weekly anomaly email shows a $544 spike on a production CDN resource group. Run the investigation to drill down to the top resource by meter, check for matching GitLab pipelines, and record the confirmed root cause in the knowledge base. ## Quick Start Ask the assistant to investigate why the cost spiked for a specific Azure resource or resource group, optionally naming the subscription or time period.

Frequently Asked Questions about cost-investigate

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I investigate an Azure cost anomaly for a specific resource?

Provide the resource or resource group name, optionally with a subscription filter, and the skill finds the latest anomaly row in the knowledge base, shows the full trend, and runs root cause analysis. Fuzzy matching handles partial names.

How to find all Azure cost anomalies in a given month?

Pass a month name or a --since/--until date range to scan every CSV in the knowledge base for anomalies in that period. Add the --unannotated flag to list only rows that still lack investigation notes.

Does the investigation require Azure CLI login?

Yes, drill-down steps such as resource-level cost queries, tag lookups, Activity Log checks, and AKS node metrics need an active az session. The skill detects expired sessions and prompts you to run az login before continuing, or lets you skip those steps.

How does it distinguish a real AKS scale-out from a billing glitch?

For VMSS anomalies it queries the kube_node_status_allocatable_cpu_cores metric on the matching AKS cluster around the anomaly date. Flat node counts with a short cost spike indicate a billing detection glitch, while a node increase confirms a real scale-out.

What happens if the knowledge base data is outdated for the requested period?

The skill checks extraction coverage cursors in _index.json and warns when the requested period extends beyond extracted email or Jira data. You can choose to extract the missing range first or investigate with available data only.