An automated workflow skill that enables AI agents to configure Cloudflare Turnstile widgets, deploy verification Workers, and implement frontend bot protection end-to-end.
Install & Download
1. ClawHub CLI
The fastest way to install a skill directly from the registry.
npx clawhub@latest install turnstile-spin
2. Manual Installation
Copy the skill folder to one of these locations
~/.openclaw/skills/ <project>/skills/ Priority: Workspace > Local > Bundled
3. Prompt Installation
Copy this prompt to OpenClaw to install it automatically.
Help me install turnstile-spin using Clawhub. If Clawhub is not installed, install it first (npm i -g clawhub).
Prefer to download?
Get the raw skill files in a ZIP archive.
What is Cloudflare Turnstile Spin Integration?
The Turnstile Spin skill is a highly cohesive, secure automation blueprint designed for Openclaw Skills ecosystems. It allows an AI coding agent to turn a simple prompt like "add CAPTCHA" into a fully functional, production-ready Cloudflare Turnstile bot protection system. By coordinating API token checks, workspace scanning, and serverless Cloudflare Workers, this skill guarantees secure validation without exposing secret credentials.
Using this skill eliminates manual widget configuration, tedious siteverify API integrations, and risky secrets management. Developers get robust, validation-passed frontend gating integrated seamlessly into their existing forms with Zero-Trust compliance out-of-the-box.
Cloudflare Turnstile Spin Integration Use Cases
- Securing contact, signup, or login forms against automated spam attacks and abusive bots using modern, user-friendly CAPTCHAs.
- Deploying a Cloudflare Worker automatically to handle secure backend token validation (siteverify) on behalf of client forms.
- Migrating legacy reCAPTCHA v2/v3 or hCaptcha implementations to privacy-focused Cloudflare Turnstile without breaking existing workflows.
- Standardizing secure integration patterns within team repositories utilizing specialized Openclaw Skills configurations.
How Cloudflare Turnstile Spin Integration Works
- Auth & Environment Scan: The agent checks for Wrangler, verifies developer credentials via
auth-probe.sh, and validates the required scopes. - Domain Detection & Codebase Audit: Detects local and production domains, scans the source code to identify target integration forms or legacy CAPTCHAs.
- Widget Creation: Invokes
widget-create.shagainst the Cloudflare API to provision the Turnstile widget and yield a public sitekey. - Worker Deployment: Deploys a managed verification Worker using the secure Turnstile secret directly to Cloudflare without writing tokens to disk.
- Frontend Injection: Modifies form action handlers using a strict "gate, don't replace" contract to validate tokens prior to submission.
- End-to-End Validation: Tests the local configuration using
validate.shto confirm the form, Worker, and Turnstile API interact perfectly.
Cloudflare Turnstile Spin Integration Setup
To enable this skill within your workspace, ensure you have Wrangler installed and run the initialization script. Setup your API token with proper permissions.
# Verify wrangler installation
npx wrangler --version
# Export your Cloudflare API Token with Turnstile:Edit and Workers:Edit scopes
export CLOUDFLARE_API_TOKEN="your_token_here"
export CLOUDFLARE_ACCOUNT_ID="your_account_id_here"
# The AI agent will auto-persist the skill locally
mkdir -p .claude/skills/turnstile-spin
cp SKILL.md .claude/skills/turnstile-spin/SKILL.md
Cloudflare Turnstile Spin Integration Data Schema & Taxonomy
This skill relies on helper automation scripts, template configurations, and environmental metadata to execute safely:
| Path / Resource | Purpose | Data Handled |
|---|---|---|
scripts/auth-probe.sh |
Diagnostics tool for Cloudflare CLI/Token scopes | Cloudflare Token, Account ID |
scripts/widget-create.sh |
Programmatic Turnstile widget registration | Domain list, Widget Sitekey |
scripts/worker-deploy.sh |
Deploys siteverify serverless proxy template | Turnstile Secret Key (secure stdin) |
scripts/validate.sh |
Validates end-to-end token flow | Mock challenge verification |
data-action attribute |
Telemetry tracker containing turnstile-spin-v1 |
Aggregate activation telemetry |
Note: Secrets are never saved to local disk and must only be passed directly to secure environments via system stdin.
Cloudflare Turnstile Spin Integration Advanced Features
- Automated Legacy Migration: Detects existing hCaptcha or Google reCAPTCHA tags and seamlessly updates them to Turnstile syntax.
- Wrangler Secret Propagation Recovery: Built-in auto-retry sequences handling delayed Cloudflare global secrets sync during Worker provisioning.
- Zero-Storage Secrets Policy: Guarantees absolute compliance with security audits by rejecting any persistent disk-writing of sensitive widget secrets.
- Isolated Verification Routing: Restricts browser-to-siteverify API calls, enforcing secure intermediary proxying via dedicated Cloudflare Workers as standard practice in modern Openclaw Skills configurations.
SKILL.md
Loading
Related Openclaw Skills
pairpulse
An open-source, local-first market basket analysis tool designed to extract product association rules and business strategy recommendations from Excel data using the Apriori algorithm.
MetricHub Multi-Tenant Metrics Platform
MetricHub is a multi-tenant SaaS metrics platform featuring query building, ECharts visualization, and dashboard orchestration optimized for Openclaw Skills.
belief-assessor
An LLM-driven epistemic reasoning engine that evaluates claims against retrieved evidence, outputting a structured belief state with calibrated confidence levels.
DeepRead Tax Forms
An AI-powered document extraction skill to convert W-2s, 1099s, 1040s, and scanned tax forms into clean, typed JSON with per-field confidence flags.
Cloudflare Durable Objects
A high-performance AI coding assistant skill designed to build, optimize, and test stateful, coordinated applications using Cloudflare Durable Objects.
Cloudflare Sandbox SDK
A powerful SDK for building secure, isolated code execution environments inside Cloudflare Workers to power AI interpreters, CI/CD pipelines, and runtime sandboxes.
Featured*
