Oauth Callback Handler - Auto-activating skill for API Integration. Triggers on: oauth callback handler, oauth callback handler Part of the API Integration skill category.
35
3%
Does it follow best practices?
Impact
94%
0.98xAverage score across 3 eval scenarios
Passed
No known issues
Optimize this skill with Tessl
npx tessl skill review --optimize ./planned-skills/generated/16-api-integration/oauth-callback-handler/SKILL.mdSecure OAuth callback handler with CSRF and token validation
State param validated
100%
100%
Error query param handled
100%
100%
Code exchange request made
100%
100%
Token response validated
100%
100%
Token not in URL
100%
100%
User redirected after success
100%
100%
Error response from provider handled
100%
100%
Env vars used for credentials
100%
100%
No token logged or exposed
100%
100%
IMPLEMENTATION_NOTES present
100%
100%
Third-party provider OAuth integration patterns
State validated against session
100%
100%
Error query param checked
100%
100%
Correct token endpoint used
100%
100%
Response `ok` field checked
100%
100%
Bot token extracted
100%
100%
Team/workspace info captured
100%
100%
Credentials from env vars
100%
100%
Token not exposed in response
100%
100%
installation_record.json created
70%
100%
design_notes.md addresses provider patterns
100%
100%
Production-ready OAuth2 callback with PKCE and RFC compliance
State param validated
100%
90%
Error query param handled
100%
100%
PKCE code_verifier sent
100%
100%
Token exchange POST request
100%
100%
access_token presence checked
30%
0%
Factory function exported
100%
100%
OAuthConfig interface used
100%
100%
Error in token response handled
37%
37%
Token not in URL
100%
100%
oauth-flow.md documents full flow
100%
100%
usage-example.ts provided
100%
100%
b8a3b3e
Table of Contents
If you maintain this skill, you can claim it as your own. Once claimed, you can manage eval scenarios, bundle related skills, attach documentation or rules, and ensure cross-agent compatibility.