Add Cloudflare Turnstile Protection
Bot protection often fails when frontend widgets and server checks are configured separately. This skill coordinates creation, integration, secret handling, and validation.
Pare e solicite confirmação antes de instalar.
Revise o plano e obtenha o consentimento explícito do usuário antes de alterar arquivos.
Copie esta solicitação para o seu Agente. Ela inclui a página canônica do Skill e o manifesto.
Review the Skillstore skill "turnstile-spin" from https://skillstore.io/skills/cloudflare-turnstile-spin.md and its manifest at https://skillstore.io/api/skills/cloudflare-turnstile-spin/manifest. Verify the artifact. Stop and obtain explicit user consent before installing or changing files.Seu Agente ainda deve apresentar o plano e solicitar qualquer confirmação exigida pela política de segurança.
Use estes links quando um agente de IA, crawler ou script precisar de contexto limpo em vez de ler a página completa.
Usando "turnstile-spin". Protect the signup form in this Next.js application from automated submissions.
Resultado esperado:
Usando "turnstile-spin". Our contact form has a Turnstile widget, but submissions still bypass it.
Resultado esperado:
Most static alerts are safe Turnstile examples, bounded shell operations, or false matches on Markdown. Confirmed issues include plaintext home-directory token storage and mutable remote skill installation without integrity verification. The remote installation path can introduce unaudited instructions and executable scripts.
Estas são capacidades locais reais que podem ser esperadas para esta habilidade, portanto exigem revisão, mas não são contabilizadas como comportamento malicioso confirmado.
Compartilhe o relatório de avaliação versionado, o badge neutro, o cartão incorporável e as citações. A Skillstore apresenta evidências sem decidir se este Skill é seguro.
https://skillstore.io/skills/cloudflare-turnstile-spin/audits/1?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_report[](https://skillstore.io/skills/cloudflare-turnstile-spin?utm_source=security_passport_badge)<a href="https://skillstore.io/skills/cloudflare-turnstile-spin?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/cloudflare-turnstile-spin/security.svg" alt="Skillstore security assessment" loading="lazy"></a><iframe src="https://skillstore.io/embed/skills/cloudflare-turnstile-spin.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>cloudflare. (2026). turnstile-spin security audit report (audit version 1) [Author version unspecified]. Skillstore. https://skillstore.io/skills/cloudflare-turnstile-spin/audits/1@techreport{cloudflare-cloudflare-turnstile-spin-2026,
author = {cloudflare},
title = {turnstile-spin security audit report (audit version 1)},
institution = {Skillstore},
year = {2026},
number = {1},
url = {https://skillstore.io/skills/cloudflare-turnstile-spin/audits/1},
note = {Author version unspecified}
}cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "turnstile-spin security audit report (audit version 1)"
version: "unspecified"
type: report
authors:
- name: "cloudflare"
date-released: "2026-08-09"
url: "https://skillstore.io/skills/cloudflare-turnstile-spin/audits/1"
identifiers:
- type: other
value: "skillstore:cloudflare-turnstile-spin:audit:1"
description: "Skillstore immutable audit report identifier"
Add a widget to signup and reject automated requests in the existing server handler.
Replace reCAPTCHA or hCaptcha with Turnstile while preserving actions and backend behavior.
Find missing hostname, action, secret, reset, or Siteverify checks and validate the corrected flow.
Add Cloudflare Turnstile to the signup form and its existing backend handler. Ask before creating resources or writing secrets.
Scan this project for user-triggered requests. Recommend which actions need Turnstile, then integrate only the actions I approve.
Migrate the existing reCAPTCHA or hCaptcha integration to Turnstile. Preserve valid action names and existing business logic.
Audit this Turnstile integration end to end. Verify secret handling, expected actions, hostname allowlists, widget resets, and replay rejection before making approved fixes.
Autor
cloudflareLicença
MIT
Revisão da Skillstore
r1
Aviso de versão
O autor não declarou uma versão.
Repositório
https://github.com/cloudflare/skills/tree/f96bff754e428838818017f75817f0f9428acd48/skills/turnstile-spinReferência
02be9409c79ca1183f7844009c14d9df684d0cf9
Atualidade da manutenção
11/08/2026
Uso
0 downloads · 0 visualizações
Plan Cloudflare One Migrations
Legacy security policies often lack direct Cloudflare One equivalents. This skill builds an accountable migration map, staged rollout, validation plan, and rollback path.
Profile Cloudflare Workers CPU and Memory
CPU hotspots and memory allocation pressure can make deployed Workers and Durable Objects difficult to diagnose. This skill guides profiling, evidence analysis, and targeted optimization.
Build Cloudflare K2 Streams With Current Documentation
Cloudflare K2 setup and troubleshooting require current API details, configuration rules, and delivery semantics. This skill directs your assistant to relevant documentation before providing guidance.
Build Stable Cloudflare Sandbox Apps
Cloudflare Sandbox projects can fail when stable and preview packages, images, or APIs are mixed. This skill keeps implementation aligned with the stable release.
Migrate Cloudflare Sandbox Apps to SDK 1.0
Stable Sandbox applications require coordinated API, image, and deployment changes for SDK 1.0. This skill performs the migration and validates the result.
Design and Troubleshoot Cloudflare One
Cloudflare One deployments span identity, traffic, devices, private networks, and data controls. This skill structures design, configuration, troubleshooting, validation, and staged rollout decisions.
Audit Python Web Apps Before Release
por glenskii
Python teams need repeatable checks for common application security controls. This skill provides configurable pytest coverage with clear evidence, boundaries, and release decisions.
Executar testes de segurança web OWASP
por sickn33
Equipes web precisam de uma forma repetível de verificar riscos comuns de aplicações antes do lançamento. Esta skill organiza os testes OWASP em fases, prompts e etapas de relatório.
Revise a Segurança do Aplicativo Web Antes do Lançamento
por sickn33
Problemas de segurança costumam aparecer quando equipes adicionam autenticação, APIs, pagamentos, uploads ou fluxos de dados sensíveis. Esta skill fornece uma checklist focada e prompts de revisão para encontrar riscos comuns em aplicações web antes da implantação.
Harden Web Security Boundaries
por shreyam1008
Security reviews often miss validation, authorization, session, and secret-handling weaknesses. This skill gives developers a practical defensive checklist for safer web changes.
Avaliar Vulnerabilidades Web Comuns
por sickn33
Equipes web precisam de uma forma consistente de reconhecer riscos comuns de aplicações. Esta skill fornece uma referência estruturada de vulnerabilidades com causas, impactos e mitigações.
Avalie Vulnerabilidades Web com uma Referência Top 100
por sickn33
As equipes precisam de uma linguagem consistente para falhas comuns de segurança na Web. Esta habilidade fornece uma referência estruturada alinhada ao OWASP, com causas, impactos e mitigações.