Habilidades waba-embedded-signup

📦

waba-embedded-signup

Name: waba-embedded-signup
Author: sentdm

Revisão do conteúdo r1 Seguro ⚙️ Comandos externos🌐 Acesso à rede

Plan Secure WABA Embedded Signup

WABA onboarding can mix incompatible signup paths, credentials, and callback contracts. This skill guides secure Sent profile setup, verification, testing, and failure recovery.

Suporta: Claude Codex Code(CC)

📊 75 Adequado

Instalar com meu Agente

Copie esta solicitação para o seu Agente. Ela inclui a página canônica do Skill e o manifesto.

Solicitação do agente

Review the Skillstore skill "waba-embedded-signup" from https://skillstore.io/skills/sentdm-waba-embedded-signup.md and its manifest at https://skillstore.io/api/skills/sentdm-waba-embedded-signup/manifest. Verify the artifact. You may proceed after verification, subject to the environment's own policy.

Seu Agente ainda deve apresentar o plano e solicitar qualquer confirmação exigida pela política de segurança.

Recursos legíveis por agentes

Use estes links quando um agente de IA, crawler ou script precisar de contexto limpo em vez de ler a página completa.

Detalhe em Markdown GET /skills/sentdm-waba-embedded-signup.md manifest assinado GET /api/skills/sentdm-waba-embedded-signup/manifest lockfile assinado GET /api/skills/sentdm-waba-embedded-signup/lockfile

Testar

Usando "waba-embedded-signup". Our organization has no connected WABA, and a child should share one.

Resultado esperado:

Start with organization Embedded Signup in the Sent dashboard.
Confirm the organization WABA connection before creating the child.
Create the child without dedicated WABA credentials.
Validate tenant boundaries, mapping, completion, and callback delivery.

Usando "waba-embedded-signup". A dedicated child profile remains submitted after completion returned 202.

Resultado esperado:

Treat 202 as processing confirmation. Check prerequisites and verified callback evidence, preserve unknown statuses, and avoid declaring failure prematurely.

Usando "waba-embedded-signup". A profile key receives 403 while using the child-profile header.

Resultado esperado:

Remove the child-profile header when using a profile key. Use an authorized organization key only when operating across an existing child profile.

Auditoria de segurança

Seguro

v1 • 02/09/2026 Abrir o relatório versionado

All 38 static alerts are false positives caused by Markdown formatting, documented identifiers, a reserved example URL, and defensive readiness guidance. No executable commands, reconnaissance behavior, prompt injection, or malicious intent were found.

Arquivos analisados

271

Linhas analisadas

Itens de revisão

Falsos positivos ignorados

Fatores de risco

A auditoria estática e semântica concluída mais recente não detectou achados de segurança confirmados. Isso não comprova que a skill não tenha efeitos colaterais.

Auditado por: codex

Compartilhar e citar este relatório

Compartilhe o relatório de avaliação versionado, o badge neutro, o cartão incorporável e as citações. A Skillstore apresenta evidências sem decidir se este Skill é seguro.

Abrir o relatório versionado

Copiar link do relatório

https://skillstore.io/skills/sentdm-waba-embedded-signup/audits/1?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_report

Badge Markdown

[![Skillstore security assessment](https://skillstore.io/badges/skills/sentdm-waba-embedded-signup/security.svg)](https://skillstore.io/skills/sentdm-waba-embedded-signup?utm_source=security_passport_badge)

Badge HTML

<a href="https://skillstore.io/skills/sentdm-waba-embedded-signup?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/sentdm-waba-embedded-signup/security.svg" alt="Skillstore security assessment" loading="lazy"></a>

Cartão incorporável

<iframe src="https://skillstore.io/embed/skills/sentdm-waba-embedded-signup.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>

Citações acadêmicas (APA · BibTeX · CFF)

Citação APA

sentdm. (2026). waba-embedded-signup security audit report (audit version 1) [Author version unspecified]. Skillstore. https://skillstore.io/skills/sentdm-waba-embedded-signup/audits/1

Citação BibTeX

@techreport{sentdm-sentdm-waba-embedded-signup-2026,
  author = {sentdm},
  title = {waba-embedded-signup security audit report (audit version 1)},
  institution = {Skillstore},
  year = {2026},
  number = {1},
  url = {https://skillstore.io/skills/sentdm-waba-embedded-signup/audits/1},
  note = {Author version unspecified}
}

CITATION.cff

cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "waba-embedded-signup security audit report (audit version 1)"
version: "unspecified"
type: report
authors:
  - name: "sentdm"
date-released: "2026-09-02"
url: "https://skillstore.io/skills/sentdm-waba-embedded-signup/audits/1"
identifiers:
  - type: other
    value: "skillstore:sentdm-waba-embedded-signup:audit:1"
    description: "Skillstore immutable audit report identifier"

Pontuação do Skillstore

Por que esta pontuação Confiança das evidências: Médio

Arquitetura

Manutenibilidade

Conteúdo

Comunidade

Conformidade com a especificação

O que você pode criar

Design Organization Onboarding

Choose dashboard signup or shared WABA inheritance, then document prerequisites, tenant boundaries, and launch checks.

Implement Dedicated Profiles

Prepare secure child-profile creation, credential handling, number mapping, completion callbacks, and sandbox testing.

Resolve Onboarding Failures

Diagnose authorization errors, missing WABA prerequisites, incorrect mappings, expired tokens, and incomplete callbacks.

Teste estes prompts

Choose a Signup Path

Explain which Sent WABA onboarding path fits an organization needing its first account. Include prerequisites and safe next steps.

Build an Inheritance Checklist

Create a checklist for a child profile inheriting the organization WABA. Cover authentication, sandbox testing, completion, and callbacks.

Review a Dedicated Design

Review this dedicated WABA onboarding design: [design]. Identify credential, tenant mapping, callback, status, and rollback risks.

Develop an Operations Runbook

Develop a runbook for [tenant model]. Compare paths, define records, route failures, preserve audit evidence, and set launch gates.

Boas práticas

Select the onboarding path before designing requests or credential storage.
Inject tokens server-side, redact logs, and retain only secret-manager references.
Test in sandbox and verify mappings, callback authenticity, idempotency, and tenant attribution.

Evitar

Do not invent a public Sent endpoint for hosted Embedded Signup.
Do not expose WABA tokens through browsers, logs, fixtures, errors, or support output.
Do not treat profile completion, Meta browser messages, and message webhooks as one event contract.