Skills waba-embedded-signup

📦

waba-embedded-signup

Name: waba-embedded-signup
Author: sentdm

Content revision r1 Safe ⚙️ External commands🌐 Network access

Plan Secure WABA Embedded Signup

WABA onboarding can mix incompatible signup paths, credentials, and callback contracts. This skill guides secure Sent profile setup, verification, testing, and failure recovery.

Supports: Claude Codex Code(CC)

📊 75 Adequate

Install with my Agent

Copy this request to your Agent. It includes the canonical Skill page and manifest.

Agent request

Review the Skillstore skill "waba-embedded-signup" from https://skillstore.io/skills/sentdm-waba-embedded-signup.md and its manifest at https://skillstore.io/api/skills/sentdm-waba-embedded-signup/manifest. Verify the artifact. You may proceed after verification, subject to the environment's own policy.

Your Agent should still show its plan and request any confirmation required by the security policy.

Agent-readable resources

Use these links when an AI agent, crawler, or script needs clean context instead of reading the full page.

Markdown detail GET /skills/sentdm-waba-embedded-signup.md Signed manifest GET /api/skills/sentdm-waba-embedded-signup/manifest Signed lockfile GET /api/skills/sentdm-waba-embedded-signup/lockfile

Test it

Using "waba-embedded-signup". Our organization has no connected WABA, and a child should share one.

Expected outcome:

Start with organization Embedded Signup in the Sent dashboard.
Confirm the organization WABA connection before creating the child.
Create the child without dedicated WABA credentials.
Validate tenant boundaries, mapping, completion, and callback delivery.

Using "waba-embedded-signup". A dedicated child profile remains submitted after completion returned 202.

Expected outcome:

Treat 202 as processing confirmation. Check prerequisites and verified callback evidence, preserve unknown statuses, and avoid declaring failure prematurely.

Using "waba-embedded-signup". A profile key receives 403 while using the child-profile header.

Expected outcome:

Remove the child-profile header when using a profile key. Use an authorized organization key only when operating across an existing child profile.

Security Audit

Safe

v1 • 9/2/2026 Open versioned report

All 38 static alerts are false positives caused by Markdown formatting, documented identifiers, a reserved example URL, and defensive readiness guidance. No executable commands, reconnaissance behavior, prompt injection, or malicious intent were found.

Files scanned

271

Lines analyzed

Review items

False positives ignored

Risk Factors

No confirmed security findings were detected by the latest completed static and semantic audit. This does not prove the skill has no side effects.

Audited by: codex

Share & cite this report

Share the versioned assessment report, neutral badge, embed card, and citations. Skillstore reports evidence without deciding whether this Skill is safe.

Open versioned report

Copy report link

https://skillstore.io/skills/sentdm-waba-embedded-signup/audits/1?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_report

Markdown badge

[![Skillstore security assessment](https://skillstore.io/badges/skills/sentdm-waba-embedded-signup/security.svg)](https://skillstore.io/skills/sentdm-waba-embedded-signup?utm_source=security_passport_badge)

HTML badge

<a href="https://skillstore.io/skills/sentdm-waba-embedded-signup?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/sentdm-waba-embedded-signup/security.svg" alt="Skillstore security assessment" loading="lazy"></a>

Embed card

<iframe src="https://skillstore.io/embed/skills/sentdm-waba-embedded-signup.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>

Academic citations (APA · BibTeX · CFF)

APA citation

sentdm. (2026). waba-embedded-signup security audit report (audit version 1) [Author version unspecified]. Skillstore. https://skillstore.io/skills/sentdm-waba-embedded-signup/audits/1

BibTeX citation

@techreport{sentdm-sentdm-waba-embedded-signup-2026,
  author = {sentdm},
  title = {waba-embedded-signup security audit report (audit version 1)},
  institution = {Skillstore},
  year = {2026},
  number = {1},
  url = {https://skillstore.io/skills/sentdm-waba-embedded-signup/audits/1},
  note = {Author version unspecified}
}

CITATION.cff

cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "waba-embedded-signup security audit report (audit version 1)"
version: "unspecified"
type: report
authors:
  - name: "sentdm"
date-released: "2026-09-02"
url: "https://skillstore.io/skills/sentdm-waba-embedded-signup/audits/1"
identifiers:
  - type: other
    value: "skillstore:sentdm-waba-embedded-signup:audit:1"
    description: "Skillstore immutable audit report identifier"

Skillstore Score

Why this score Evidence Confidence: Medium

Architecture

Maintainability

Content

Community

Spec Compliance

What You Can Build

Design Organization Onboarding

Choose dashboard signup or shared WABA inheritance, then document prerequisites, tenant boundaries, and launch checks.

Implement Dedicated Profiles

Prepare secure child-profile creation, credential handling, number mapping, completion callbacks, and sandbox testing.

Resolve Onboarding Failures

Diagnose authorization errors, missing WABA prerequisites, incorrect mappings, expired tokens, and incomplete callbacks.

Try These Prompts

Choose a Signup Path

Explain which Sent WABA onboarding path fits an organization needing its first account. Include prerequisites and safe next steps.

Build an Inheritance Checklist

Create a checklist for a child profile inheriting the organization WABA. Cover authentication, sandbox testing, completion, and callbacks.

Review a Dedicated Design

Review this dedicated WABA onboarding design: [design]. Identify credential, tenant mapping, callback, status, and rollback risks.

Develop an Operations Runbook

Develop a runbook for [tenant model]. Compare paths, define records, route failures, preserve audit evidence, and set launch gates.

Best Practices

Select the onboarding path before designing requests or credential storage.
Inject tokens server-side, redact logs, and retain only secret-manager references.
Test in sandbox and verify mappings, callback authenticity, idempotency, and tenant attribution.

Avoid

Do not invent a public Sent endpoint for hosted Embedded Signup.
Do not expose WABA tokens through browsers, logs, fixtures, errors, or support output.
Do not treat profile completion, Meta browser messages, and message webhooks as one event contract.