external/vercel-cost-optimization/SKILL.md
Analyze Vercel billing data, identify primary cost drivers, map them to your code, and provide scored optimization recommendations. Use when asked to optimize Vercel costs, reduce Vercel bill, analyze Vercel usage, or improve Vercel spending efficiency.
npx skillsauth add seikaikyo/dash-skills vercel-cost-optimizationInstall this skill globally with one command. Works with Claude Code, Cursor, and Windsurf.
3 of 9 scanners reported clean
Some scanners were skipped, did not run, or reported a non-clean status. Review each row below.
Analyzes your Vercel billing data, detects your project stack, maps cost drivers to specific code locations, and provides scored, actionable optimization recommendations ranked by estimated savings.
npm i -g vercel && vercel login)vercel link in project root)package.json in the working directoryVerify setup:
vercel whoami # Should print your username
vercel project # Should show linked project
Follow these 6 steps in order. Each step builds on the previous.
Run the usage script to pull billing data for the current billing period:
bash scripts/get-usage.sh --from YYYY-MM-DD --to YYYY-MM-DD
--breakdown for per-resource granularity if overall costs are unclearParse the JSON output and identify:
Run the stack detection script in the project root:
bash scripts/detect-stack.sh .
This outputs a JSON object with:
framework, frameworkVersion — determines which optimization patterns applyhasAppRouter, hasPagesRouter — affects routing-specific recommendationstypescript — for code example formattingorm — triggers stack-specific advice (Prisma, Drizzle, etc.)isMonorepo — may affect path-based investigationconfigFlags — already-enabled optimizationshasCron, cronCount — cron-specific cost investigationRead the billing service mapping reference:
resources/billing-service-mapping.md
For each of the top 3 cost drivers identified in Step 1:
Record findings as a list of (billing_service, file, line, issue_description) tuples.
Read the optimization patterns and version gating references:
resources/optimization-patterns.md
resources/version-gating.md
For each code issue found in Step 3:
frameworkVersionreact-best-practices rulesIf the detected orm is not "none", also read:
resources/stack-specific-advice.md
And include any applicable ORM/library-specific recommendations.
Read the scoring guide:
resources/scoring-guide.md
For each applicable optimization from Step 4:
score = estimated_savings × effort_multiplier × confidenceSort remaining recommendations by score descending.
Use the report template below to present findings to the user.
Present the following report to the user:
Project: {project_name} Stack: {framework} {frameworkVersion} | {orm} | {app_router/pages_router} Billing Period: {from} to {to} Total Cost: ${total}
| Service | Cost | % of Total | |---------|------|------------| | {service_1} | ${amount} | {pct}% | | {service_2} | ${amount} | {pct}% | | ... | ... | ... |
For each top cost driver, explain:
Group by tier:
High Impact (>$20/mo savings)
| # | Pattern | Est. Savings | Effort | Confidence | Score | |---|---------|-------------|--------|------------|-------| | 1 | {ID}: {title} | ${savings}/mo | {Low/Med/High} | {confidence} | ${score} |
For each recommendation, provide:
react-best-practices rule if applicable (e.g., "See rule async-parallel")Medium Impact ($10-20/mo savings)
(Same table format)
Quick Wins ($5-10/mo savings)
(Same table format)
Check these Vercel platform settings:
If total estimated savings < $10/mo:
Your project is already well-optimized. The identified optimizations would yield minimal savings. Consider revisiting after traffic grows significantly.
This skill references the following rules from react-best-practices. Reference them by name — do not duplicate the rule content:
| Rule | Used In | Context |
|------|---------|---------|
| async-parallel | DUR-01 | Parallel data fetching with Promise.all |
| server-parallel-fetching | DUR-01 | Restructure components for parallel fetches |
| server-cache-react | DUR-05 | React.cache() for request deduplication |
| server-cache-lru | DUR-05 | LRU cache for cross-request caching |
| server-after-nonblocking | DUR-06 | after() for non-blocking operations |
| bundle-dynamic-imports | BW-02 | next/dynamic for heavy components |
| bundle-barrel-imports | BW-03 | Direct imports to avoid barrel files |
| bundle-defer-third-party | BW-04 | Defer analytics and third-party scripts |
| async-suspense-boundaries | BW-05 | Suspense boundaries for streaming |
When presenting a recommendation that maps to a react-best-practices rule, mention:
"See
react-best-practicesrule{rule-name}for detailed implementation guidance."
Install the Vercel CLI: npm i -g vercel
Run vercel login and follow the prompts.
Run vercel link in the project root to connect to your Vercel project.
The detection script works without jq but results are more reliable with it installed:
brew install jqapt-get install jq or yum install jqnode_modules is installed (npm install) for accurate version detectionpackage.json — verify your dependencies are listed correctlySavings estimates are conservative approximations based on billing data and code patterns. Actual savings depend on traffic patterns, caching hit rates, and implementation details. Monitor your Vercel bill after applying changes to validate impact.
tools
Conduct comprehensive GDPR compliance assessments by evaluating data processing activities against EU Regulation 2016/679, including Article 30 records of processing, lawful basis validation, data subject rights implementation, Data Protection Impact Assessments (DPIAs) under Article 35, breach notification procedures, international transfer safeguards (SCCs, adequacy decisions), and technical/organizational measures under Article 32. Use when processing personal data of EU residents, preparing for supervisory authority audits, implementing privacy-by-design for new systems, scoping compliance gaps for M&A due diligence, assessing third-party processors, or responding to data subject access requests at scale. Incorporates 2026 guidance from ICO, EDPB, and post-Data (Use and Access) Act 2025 UK-GDPR considerations. Do not use for implementing specific Article 32 controls — use implementing-gdpr-data-protection-controls; or for DSAR automation — use implementing-gdpr-data-subject-access-request.
tools
Parse Windows forensic artifacts—$MFT/$J (MFTECmd), Prefetch (PECmd), registry hives (RECmd), shellbags, and Amcache—into normalized CSV/JSON with Eric Zimmerman's EZ Tools, then load results into Timeline Explorer for analysis. Use during DFIR/incident-response investigations, after triage collection (e.g. with KAPE), to establish program execution, file/folder access, and persistence evidence from acquired forensic images.
development
Build automated multi-turn adversarial attacks against conversational LLM targets using Microsoft PyRIT's RedTeamingOrchestrator, CrescendoOrchestrator (gradual escalation), and TreeOfAttacksWithPruningOrchestrator (adaptive branching), with scorer feedback loops and persisted conversation memory. Use when single-shot LLM scanning is insufficient and you need multi-turn, scorer-driven AI red-team campaigns against a chatbot or agent.
testing
Stand up MISP, enable and cache curated threat feeds (CIRCL, abuse.ch, Feodo Tracker), apply warninglists to suppress false positives, query indicators with PyMISP, and export attributes as auto-generated Suricata/Sigma/Wazuh detection rules. Use when maturing a MISP instance to actively drive detection, curating threat feeds with quality controls, or automating IOC-to-detection pipelines for the SIEM/IDS.