SkillsWeb performance & security › Turnstile Setup
turnstile-spin

Turnstile Setup

End-to-end setup of Cloudflare Turnstile — the friendly, privacy-first “are you human?” check (a CAPTCHA alternative) that stops bots from spamming a form. Useful if we ever put a public form on an MM site.

Claude Code only
How to use it
Ask Claude to add Turnstile and it runs a guided wizard: scans the codebase, creates the widget via the Cloudflare API, deploys the verify Worker, adds the frontend snippets, and actually validates it works — pausing for your OK before anything irreversible. Claude Code only: it edits your site code and runs wrangler.
How to invoke / keep it on
Say “set up Turnstile” / “protect this form from bots” in Claude Code and it loads and starts the wizard.
20 powerful examples for Melinda Maria
Copy, tweak, make them yours. Just describe the task — Claude loads the skill automatically.
01"Add Turnstile to a new MM newsletter-signup form so we stop getting bot signups, and confirm it actually blocks them before you call it done."
02"Scan this landing-page repo, tell me where the signup form is, and walk me step by step through wiring Turnstile into it."
03"Explain what the siteverify step does and why the secret key has to live on the server, in plain English."
04"We’re getting spam through a contact form — set up Turnstile end to end and validate the integration on localhost first."
05"Add Turnstile to our wholesale-inquiry form so fake retailer signups stop hitting #wholesale, and test that a bot is rejected."
06"Create the Turnstile widget via the Cloudflare API for me and show me where to put the site key versus the secret key."
07"Walk me through choosing the right Turnstile widget mode (managed vs invisible) for a clean, on-brand signup experience."
08"Set up the verify Worker that checks Turnstile tokens and rejects submissions that fail, and show me the success/failure responses."
09"Help me style the Turnstile widget so it doesn’t clash with our lavender / hot-pink form design."
10"Explain how Turnstile differs from a traditional CAPTCHA and why it’s friendlier for real customers."
11"Test the full flow: confirm a real submission passes and a scripted one is blocked, before we ship."
12"Add Turnstile to a giveaway-entry page so we don’t get flooded with bot entries, with the verify step server-side."
13"Show me how to handle a failed Turnstile check gracefully so a real person who got flagged can retry."
14"Walk me through storing the Turnstile secret with wrangler secret put so it never ends up in the page source."
15"Help me add Turnstile to a Google-Form-style internal request page hosted on our site."
16"Explain what data Turnstile does and doesn’t collect, so I can answer a privacy question from the team."
17"Set up Turnstile on a password-gated preview of the onboarding hub so only humans can attempt the gate."
18"Diagnose why Turnstile is showing but submissions still get through, and fix the missing server-side verification."
19"Show me how to rotate the Turnstile keys if I think they leaked, without breaking the live form."
20"Draft a short note for the team explaining what Turnstile is and which MM forms now have it protecting them."
← Back to Web performance & security
Powered by our people. Amplified by AI. Ready-to-run playbooks for every team.