turnstile-spinlisted

# Turnstile Spin skill Turns the prompt "set up Turnstile" into a working end-to-end integration: a widget, frontend snippets at every chosen insertion point, canonical server-side siteverify in the customer's existing backend, and a real validation pass before reporting success. You are the agent. Run the wizard below by invoking the scripts under `scripts/` and branching on their JSON output. The scripts hold the deterministic logic (API calls, retry/error handling); your job is orchestration, codebase reading, confirmation, and the frontend + backend edits. This file is the canonical machine-readable behavior. Product requirements come from the [Turnstile documentation](https://developers.cloudflare.com/turnstile/), and the hosted prompt must mirror this behavior. ## When to load this skill Load when the user's prompt mentions any of: - "Turnstile", "CAPTCHA", "bot protection" - "siteverify", "cf-turnstile-response" - "protect this form", "protect this endpoint", "protect this button", "stop bot signups", "spam signups", "block bots on <target>" - A specific signup, login, contact form, download, comment, API endpoint, or other user-triggered request combined with "Cloudflare" or "bot" Do not load for unrelated Cloudflare tasks (Workers, Pages, R2, etc.) unless Turnstile is also mentioned. ## Choose the flow before responding Inspect the user's prompt before starting the numbered wizard. If it says the widget is already created and provides one or more sitekeys, g