turnstile-spin

cloudflare/skills

Set up, repair, or migrate to Cloudflare Turnstile bot verification in an existing frontend and backend, including server-side Siteverify.

The scanner found nothing risky in its 15 files.

Repository skills.sh

What it does

Runs shell commands
Installs packages
Reaches api.cloudflare.com, challenges.cloudflare.com, dash.cloudflare.com, developers.cloudflare.com, github.com, hcaptcha.com, js.hcaptcha.com, www.google.com
Reads ACCOUNT_ENCODED, ACCOUNT_ID, API_RESPONSE, API_TOKEN, BODY_JSON, CLOUDFLARE_ACCOUNT_ID, CLOUDFLARE_API_TOKEN, DOMAINS, EXPECTED_DOMAINS_JSON, HTTP_CODE, MODE, NAME, PATH, PATH_ARG, PROJECT_ROOT, RESPONSE_BODY, SECRET_NAME, SITEKEY, SITEKEY_ENCODED, SITEVERIFY_RESPONSE, SOURCE_DIR, TARGET_DIR, TEMP_DIR, TMPDIR, TURNSTILE_HOSTNAMES, TURNSTILE_SECRET, WIDGET_API_SECRET, WIDGET_RESPONSE, WIDGET_SECRET, WORKER_NAME, WRANGLER_BIN, WRANGLER_CONFIG, WRANGLER_ENV, WRANGLER_VERSION
Writes $TEMP_DIR, .claude/skills/turnstile-spin, {state.error}

Findings (0)

The scanner found nothing risky in 15 files.

Decide which skills your team's agents may run

skillsvault scans every skill your organisation uses, blocks the ones you ban on every developer's machine, and keeps a tamper-evident record of every run. Free for one developer.

Add it to your registry Get started free

A deterministic scan of the skill's files as published today; it isn't a guarantee. It reads the files and reports what they do — nothing is run or installed.