bot-protection
Pass
Audited by Gen Agent Trust Hub on Sep 16, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill references and integrates well-known third-party services and libraries.
- Fetches the Cloudflare Turnstile API script from
https://challenges.cloudflare.com/turnstile/v0/api.jsfor client-side CAPTCHA implementation. - Utilizes standard Node.js packages
@upstash/ratelimitand@upstash/redisfor implementing server-side and edge-based rate limiting. - [COMMAND_EXECUTION]: The skill provides legitimate code snippets for backend verification and protection logic.
- Includes a TypeScript implementation for server-side token verification using a POST request to Cloudflare's official verification endpoint.
- Provides Next.js Edge Middleware templates for performing IP-based rate limiting using Redis.
- [SAFE]: The skill follows security best practices by recommending the use of environment variables (
process.env.TURNSTILE_SECRET_KEY) for secret management and utilizing passive, privacy-preserving CAPTCHA signals.
Audit Metadata