What problem does it solve? When Nebius CLI commands fail due to missing credentials, ambiguous project selection, or malformed auth selectors, this Skill performs read-only diagnosis of the current session's project and agent-auth state, classifying the failure without ever mutating credentials, profiles, or IAM. ## Core Features & Use Cases - Deterministic Project Resolution: Resolves exactly one project ID from explicit task context, workspace configuration, or the config-owned default profile's parent-id, asking the user when evidence is ambiguous. - Read-Only Auth Verification: Checks credential files, profile output, selector placement, and token minting via the setup verifier without writing files or changing IAM. - Failure Classification and Safe Retry: Distinguishes command-shape denials (retried once with a canonical leading selector) from persistent failures like project-authorization drift, missing tenant read access, or blocked admin auth, routing repair to explicit setup invocation. - Use Case: A Nebius command is denied because it lacks a leading CODEX_NEBIUS_PROJECT_ID selector; the Skill reuses the known task project, retries the corrected payload once, and reports the outcome without invoking setup. ## Quick Start Ask the agent to diagnose why your Nebius command is failing with an authentication or project error for your current task.
