cloudflare-turnstile

Pass

Audited by Gen Agent Trust Hub on Sep 4, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill provides comprehensive and secure implementation patterns for Cloudflare Turnstile. It emphasizes mandatory server-side validation via the official Cloudflare Siteverify API (https://challenges.cloudflare.com/turnstile/v0/siteverify) and includes guidance on protecting secret keys using environment variables. The included shell script check-csp.sh is a benign utility for verifying Content Security Policy headers against a user-provided URL. All external references and documentation links point to official Cloudflare developer domains or verified third-party libraries (e.g., @marsidev/react-turnstile).
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 4, 2026, 06:55 AM
Security Audit — agent-trust-hub — cloudflare-turnstile