cloudflare-turnstile
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill is entirely instructional and serves to guide developers in implementing Cloudflare Turnstile for bot protection.
- [SAFE]: Instructions explicitly warn against hardcoding secrets and provide clear guidance on using environment variables and secure secrets management (e.g., Cloudflare Workers secrets).
- [SAFE]: All network operations involve Cloudflare's official endpoints (challenges.cloudflare.com), which is a trusted organization and well-known service.
- [SAFE]: The provided templates for React, Hono, and mobile WebViews follow standard integration patterns and include appropriate error handling and lifecycle management.
- [SAFE]: The
check-csp.shutility is a benign diagnostic script designed to help users verify their Content Security Policy headers for compatibility with Turnstile.
Audit Metadata