form-captcha
Pass
Audited by Gen Agent Trust Hub on Aug 11, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides legitimate security advice based on industry standards such as OWASP and frontendchecklist.io.
- [EXTERNAL_DOWNLOADS]: The skill references official integration scripts from Cloudflare and Google for CAPTCHA services. These are well-known services and the integration follows standard documentation.
- [CREDENTIALS_UNSAFE]: The code examples correctly demonstrate the use of environment variables for storing secret keys (e.g., process.env.TURNSTILE_SECRET_KEY), which is a recommended security practice to avoid hardcoding credentials.
Audit Metadata