cloudflare-turnstile
Pass
Audited by Gen Agent Trust Hub on Sep 4, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides comprehensive and secure implementation patterns for Cloudflare Turnstile. It emphasizes mandatory server-side validation via the official Cloudflare Siteverify API (
https://challenges.cloudflare.com/turnstile/v0/siteverify) and includes guidance on protecting secret keys using environment variables. The included shell scriptcheck-csp.shis a benign utility for verifying Content Security Policy headers against a user-provided URL. All external references and documentation links point to official Cloudflare developer domains or verified third-party libraries (e.g.,@marsidev/react-turnstile).
Audit Metadata