CtrlK
BlogDocsLog inGet started
Tessl Logo

oauth-callback-handler

Oauth Callback Handler - Auto-activating skill for API Integration. Triggers on: oauth callback handler, oauth callback handler Part of the API Integration skill category.

35

0.98x
Quality

3%

Does it follow best practices?

Impact

94%

0.98x

Average score across 3 eval scenarios

SecuritybySnyk

Passed

No known issues

Optimize this skill with Tessl

npx tessl skill review --optimize ./planned-skills/generated/16-api-integration/oauth-callback-handler/SKILL.md
SKILL.md
Quality
Evals
Security

Evaluation results

100%

GitHub OAuth Login for Developer Dashboard

Secure OAuth callback handler with CSRF and token validation

Criteria
Without context
With context

State param validated

100%

100%

Error query param handled

100%

100%

Code exchange request made

100%

100%

Token response validated

100%

100%

Token not in URL

100%

100%

User redirected after success

100%

100%

Error response from provider handled

100%

100%

Env vars used for credentials

100%

100%

No token logged or exposed

100%

100%

IMPLEMENTATION_NOTES present

100%

100%

100%

3%

Slack App OAuth Installation Callback

Third-party provider OAuth integration patterns

Criteria
Without context
With context

State validated against session

100%

100%

Error query param checked

100%

100%

Correct token endpoint used

100%

100%

Response `ok` field checked

100%

100%

Bot token extracted

100%

100%

Team/workspace info captured

100%

100%

Credentials from env vars

100%

100%

Token not exposed in response

100%

100%

installation_record.json created

70%

100%

design_notes.md addresses provider patterns

100%

100%

84%

-4%

OAuth 2.0 Callback Handler Library for Internal Platform

Production-ready OAuth2 callback with PKCE and RFC compliance

Criteria
Without context
With context

State param validated

100%

90%

Error query param handled

100%

100%

PKCE code_verifier sent

100%

100%

Token exchange POST request

100%

100%

access_token presence checked

30%

0%

Factory function exported

100%

100%

OAuthConfig interface used

100%

100%

Error in token response handled

37%

37%

Token not in URL

100%

100%

oauth-flow.md documents full flow

100%

100%

usage-example.ts provided

100%

100%

Repository
jeremylongshore/claude-code-plugins-plus-skills
Evaluated
Agent
Claude Code
Model
Claude Sonnet 4.6

Table of Contents

Is this your skill?

If you maintain this skill, you can claim it as your own. Once claimed, you can manage eval scenarios, bundle related skills, attach documentation or rules, and ensure cross-agent compatibility.