Turnstile Spin skill

Turns the prompt "set up Turnstile" into a working end-to-end integration: a widget, frontend snippets at every chosen insertion point, canonical server-side siteverify in the customer's existing backend, and a real validation pass before reporting success.

Start with local discovery and select repair, reuse, or creation. Use the numbered wizard only for creation. The scripts under scripts/ hold deterministic API and error-handling logic; use only the operations needed for the selected flow.

This file defines this locally maintained bundle's behavior. Product requirements come from the Turnstile documentation. The upstream hosted prompt may not contain the local fixes; do not replace this bundle with that prompt during setup.

When to load this skill

Load when the user's prompt mentions any of:

• "Turnstile", "CAPTCHA", "bot protection"
• "siteverify", "cf-turnstile-response"
• "protect this form", "protect this endpoint", "protect this button", "stop bot signups", "spam signups", "block bots on "
• A specific signup, login, contact form, download, comment, API endpoint, or other user-triggered request combined with "Cloudflare" or "bot"

Do not load for unrelated Cloudflare tasks (Workers, Pages, R2, etc.) unless Turnstile is also mentioned.