OAuth Rescue for Skills

You installed a skill that needs OAuth. It doesn't work. The error says 'invalid_grant' or 'redirect_uri_mismatch' or just... nothing. You Google it. You find 15 Stack Overflow threads, none of which match your exact situation. You try changing the redirect URI. Still broken. You regenerate the client secret. Still broken. Three hours later, you're staring at the same error with no idea what's actually wrong. OAuth failures are the #1 reason skill installs fail after the download succeeds.

OAuth Rescue for Skills is a zero-config troubleshooting skill that diagnoses broken auth fast. It classifies the failure stage (app setup, redirect, token exchange, refresh, or environment wiring), maps common error signatures to their likely root causes, gives you a safe next-step fix ladder with verification at each step, and tells you when the issue is outside your control and needs admin or vendor intervention. No more guessing. No more Stack Overflow rabbit holes. Read the error, run the rescue, fix the auth.

What's Included

• Complete SKILL.md with auth failure diagnostic workflow
• Failure-stage classifier: app setup → redirect → token exchange → refresh → environment
• Error signature map: invalid_grant, redirect_uri_mismatch, missing scopes, callback failures, and 10+ more
• Evidence checklist that avoids sharing secrets while gathering diagnostic info
• Safe fix ladder with verification steps at each stage
• Escalation boundary — clear line between "you can fix this" and "contact the provider"
• Prevention checklist — avoid the same auth failures on future skill installs
• Example rescue cases showing real diagnosis-to-fix workflows

Why This is Better

• Not another OAuth implementation guide — this is a rescue tool for broken auth
• Classifies the failure stage first, so you're not trying random fixes
• Maps specific error messages to specific root causes — no guessing
• Includes an evidence checklist that keeps your secrets safe during diagnosis
• Built from rescuing real broken skill installs, not from reading OAuth docs
• Tells you when to stop and escalate instead of wasting more hours