📦

waba-embedded-signup

Name: waba-embedded-signup
Author: sentdm

مراجعة المحتوى r1 آمن ⚙️ الأوامر الخارجية🌐 الوصول إلى الشبكة

Plan Secure WABA Embedded Signup

WABA onboarding can mix incompatible signup paths, credentials, and callback contracts. This skill guides secure Sent profile setup, verification, testing, and failure recovery.

يدعم: Claude Codex Code(CC)

📊 75 كافٍ

التثبيت باستخدام Agent لدي

انسخ هذا الطلب إلى Agent لديك. يتضمن صفحة Skill المعتمدة وملف manifest.

طلب الوكيل

Review the Skillstore skill "waba-embedded-signup" from https://skillstore.io/skills/sentdm-waba-embedded-signup.md and its manifest at https://skillstore.io/api/skills/sentdm-waba-embedded-signup/manifest. Verify the artifact. You may proceed after verification, subject to the environment's own policy.

يجب أن يواصل Agent عرض خطته وطلب أي تأكيد تفرضه سياسة الأمان.

موارد مهيّأة لـ Agents

استخدم هذه الروابط عندما يحتاج AI Agent أو crawler أو script إلى سياق نظيف بدلًا من قراءة الصفحة كاملة.

تفاصيل Markdown GET /skills/sentdm-waba-embedded-signup.md manifest موقَّع GET /api/skills/sentdm-waba-embedded-signup/manifest lockfile موقَّع GET /api/skills/sentdm-waba-embedded-signup/lockfile

اختبرها

جارٍ استخدام "waba-embedded-signup". Our organization has no connected WABA, and a child should share one.

النتيجة المتوقعة:

Start with organization Embedded Signup in the Sent dashboard.
Confirm the organization WABA connection before creating the child.
Create the child without dedicated WABA credentials.
Validate tenant boundaries, mapping, completion, and callback delivery.

جارٍ استخدام "waba-embedded-signup". A dedicated child profile remains submitted after completion returned 202.

النتيجة المتوقعة:

Treat 202 as processing confirmation. Check prerequisites and verified callback evidence, preserve unknown statuses, and avoid declaring failure prematurely.

جارٍ استخدام "waba-embedded-signup". A profile key receives 403 while using the child-profile header.

النتيجة المتوقعة:

Remove the child-profile header when using a profile key. Use an authorized organization key only when operating across an existing child profile.

التدقيق الأمني

آمن

v1 • ٢‏/٩‏/٢٠٢٦ فتح التقرير المرتبط بالإصدار

All 38 static alerts are false positives caused by Markdown formatting, documented identifiers, a reserved example URL, and defensive readiness guidance. No executable commands, reconnaissance behavior, prompt injection, or malicious intent were found.

الملفات التي تم فحصها

271

الأسطر التي تم تحليلها

عناصر المراجعة

تم تجاهل الإيجابيات الكاذبة

عوامل الخطر

⚙️ الأوامر الخارجية (28)

🌐 الوصول إلى الشبكة (1)

SKILL.md:81

لم يكتشف أحدث تدقيق ثابت ودلالي مكتمل أي نتائج أمنية مؤكدة. ولا يثبت ذلك أن المهارة خالية من الآثار الجانبية.

دقّقه: codex

شارك واستشهد بهذا التقرير

شارك تقرير التقييم المرتبط بالإصدار والشارة المحايدة وبطاقة التضمين والاستشهادات. تعرض Skillstore الأدلة من دون أن تقرر ما إذا كانت هذه المهارة آمنة.

فتح التقرير المرتبط بالإصدار

نسخ رابط التقرير

https://skillstore.io/skills/sentdm-waba-embedded-signup/audits/1?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_report

شارة Markdown

[![Skillstore security assessment](https://skillstore.io/badges/skills/sentdm-waba-embedded-signup/security.svg)](https://skillstore.io/skills/sentdm-waba-embedded-signup?utm_source=security_passport_badge)

شارة HTML

<a href="https://skillstore.io/skills/sentdm-waba-embedded-signup?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/sentdm-waba-embedded-signup/security.svg" alt="Skillstore security assessment" loading="lazy"></a>

بطاقة قابلة للتضمين

<iframe src="https://skillstore.io/embed/skills/sentdm-waba-embedded-signup.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>

الاستشهادات الأكاديمية (APA · BibTeX · CFF)

اقتباس APA

sentdm. (2026). waba-embedded-signup security audit report (audit version 1) [Author version unspecified]. Skillstore. https://skillstore.io/skills/sentdm-waba-embedded-signup/audits/1

اقتباس BibTeX

@techreport{sentdm-sentdm-waba-embedded-signup-2026,
  author = {sentdm},
  title = {waba-embedded-signup security audit report (audit version 1)},
  institution = {Skillstore},
  year = {2026},
  number = {1},
  url = {https://skillstore.io/skills/sentdm-waba-embedded-signup/audits/1},
  note = {Author version unspecified}
}

CITATION.cff

cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "waba-embedded-signup security audit report (audit version 1)"
version: "unspecified"
type: report
authors:
  - name: "sentdm"
date-released: "2026-09-02"
url: "https://skillstore.io/skills/sentdm-waba-embedded-signup/audits/1"
identifiers:
  - type: other
    value: "skillstore:sentdm-waba-embedded-signup:audit:1"
    description: "Skillstore immutable audit report identifier"

تقييم Skillstore

سبب هذا التقييم موثوقية الأدلة: متوسط

الهندسة المعمارية

قابلية الصيانة

المحتوى

المجتمع

الامتثال للمواصفات

ما الذي يمكنك بناؤه

Design Organization Onboarding

Choose dashboard signup or shared WABA inheritance, then document prerequisites, tenant boundaries, and launch checks.

Implement Dedicated Profiles

Prepare secure child-profile creation, credential handling, number mapping, completion callbacks, and sandbox testing.

Resolve Onboarding Failures

Diagnose authorization errors, missing WABA prerequisites, incorrect mappings, expired tokens, and incomplete callbacks.

جرّب هذه الموجّهات

Choose a Signup Path

Explain which Sent WABA onboarding path fits an organization needing its first account. Include prerequisites and safe next steps.

Build an Inheritance Checklist

Create a checklist for a child profile inheriting the organization WABA. Cover authentication, sandbox testing, completion, and callbacks.

Review a Dedicated Design

Review this dedicated WABA onboarding design: [design]. Identify credential, tenant mapping, callback, status, and rollback risks.

Develop an Operations Runbook

Develop a runbook for [tenant model]. Compare paths, define records, route failures, preserve audit evidence, and set launch gates.

أفضل الممارسات

Select the onboarding path before designing requests or credential storage.
Inject tokens server-side, redact logs, and retain only secret-manager references.
Test in sandbox and verify mappings, callback authenticity, idempotency, and tenant attribution.

تجنب

Do not invent a public Sent endpoint for hosted Embedded Signup.
Do not expose WABA tokens through browsers, logs, fixtures, errors, or support output.
Do not treat profile completion, Meta browser messages, and message webhooks as one event contract.