Vero-Ventures/cloudflare
.claude/skills/cloudflare/SKILL.md
Manage Cloudflare Turnstile CAPTCHA via REST API. Check widget status, list site keys, view solve rates and analytics, and validate challenge tokens. Use for CAPTCHA administration and debugging.
development
Updated Apr 16, 2026
$ install --global
skillsauthnpx skillsauth add Vero-Ventures/fuzzycat cloudflareInstall this skill globally with one command. Works with Claude Code, Cursor, and Windsurf.
Security Scan Results
3 of 9 scanners reported clean
Some scanners were skipped, did not run, or reported a non-clean status. Review each row below.
3
Scanners Passed
9
Scanners in report
Clean
TrivyContainer and dependency vulnerability scanner
95%
Clean
SemgrepStatic code analysis for vulnerabilities
95%
Clean
mcp-scan (Snyk)Model Context Protocol security validation
95%
Skipped
Snyk (dep)Open source security scanning
50%
Skipped
Socket.devSupply chain security analysis
50%
Skipped
VirusTotalMulti-engine malware detection
50%
Skipped
CrowdStrikeAdvanced threat intelligence
50%
Skipped
OSV-ScannerOpen Source Vulnerability database check
50%
Skipped
OWASP Dep-Check
50%
Last scanned: Apr 16, 2026, 5:34 PM7.5s1 file scanned
SKILL.md
- name:
- cloudflare
- description:
- >
- allowed-tools:
- Bash, Read, Grep, Glob
Cloudflare Turnstile API
Manage FuzzyCat's Cloudflare Turnstile CAPTCHA integration.
Authentication
TURNSTILE_SITE_KEY=$(grep NEXT_PUBLIC_TURNSTILE_SITE_KEY .env.local | cut -d'"' -f2)
TURNSTILE_SECRET=$(grep TURNSTILE_SECRET_KEY .env.local | cut -d'"' -f2)
Common Commands
Validate a Turnstile Token
# Server-side validation (this is what our backend does)
curl -s -X POST "https://challenges.cloudflare.com/turnstile/v0/siteverify" \
-H "Content-Type: application/json" \
-d "{
\"secret\": \"$TURNSTILE_SECRET\",
\"response\": \"<token-from-client>\"
}" | python3 -m json.tool
# Response: {"success": true/false, "challenge_ts": "...", "hostname": "..."}
Test Keys (for development)
Cloudflare provides special test site keys and secrets that always pass, always fail, or force an interactive challenge. See: https://developers.cloudflare.com/turnstile/troubleshooting/testing/
Wrangler CLI
# Available via npx (v1.x legacy)
npx wrangler --version
# Note: Turnstile management requires the Cloudflare dashboard or API with an
# account-level API token. The Turnstile keys in .env.local are widget-level
# (site key + secret), not account-level API tokens.
DNS Management
Domain fuzzycatapp.com DNS is on Namecheap (registrar-servers.com nameservers),
NOT on Cloudflare. To manage DNS records, use the Namecheap dashboard or API.
FuzzyCat-Specific
- Site key:
0x4AAAAAACgH2wVefrJpTaCh - Used on: Login, signup, forgot-password, enrollment forms
- Key files:
components/shared/captcha.tsx,lib/turnstile.ts - CSP: Turnstile requires
https://challenges.cloudflare.comin script-src
Related Skills
Vero-Ventures/vercel
tools
VerifiedTrustedCommunity
Manage Vercel deployments via CLI. Check deployment status, view logs, manage environment variables, inspect domains, trigger builds, and debug production issues. Use for any deployment or hosting task.
SKILL.mdUpdated Apr 16, 2026
Vero-Ventures/twilio
development
VerifiedTrustedCommunity
Manage Twilio SMS service via REST API. Send test messages, check message logs, inspect phone numbers, check account balance, and debug SMS delivery issues. Use for any SMS/Twilio administration task.
SKILL.mdUpdated Apr 16, 2026
Vero-Ventures/supabase
tools
VerifiedTrustedCommunity
Manage Supabase projects via CLI and Management API. List projects, check auth config, manage users, update settings, query databases, and inspect project health. Use for any Supabase administration task.
SKILL.mdUpdated Apr 16, 2026
Vero-Ventures/stripe
development
VerifiedTrustedCommunity
Interact with Stripe via REST API. List customers, payments, payouts, connected accounts, check balances, view webhook events, and manage Stripe Connect. Use for any Stripe administration, debugging, or data inspection task.
SKILL.mdUpdated Apr 16, 2026