turnstile

Warn

Audited by Socket on Aug 16, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS: Internally consistent with its stated purpose and same-org API usage, but the purpose itself is to bypass/solve Cloudflare Turnstile for arbitrary target sites. No strong malware or supply-chain indicators are present, yet the capability materially enables abusive automation and should be treated as high-risk.

Confidence: 89%Severity: 74%
Audit Metadata
Analyzed At
Aug 16, 2026, 12:55 PM
Package URL
pkg:socket/skills-sh/acedatacloud%2Fskills%2Fturnstile%2F@6da8083cf3134c32601d825808a46b25de5e6c2bf57110bc9378a01fb7aa85bb
Security Audit — socket — turnstile