turnstile-testing

turnstile-testing is a skill for Claude Code, Codex from jumodada/Drissionpage-MCP-Server. It costs 69 tokens per session (1,478 once invoked), scanned A, original, no licence file.

A testing skill for authorized Cloudflare Turnstile integrations. Turnstile is Cloudflare’s website security check designed to distinguish people from automated traffic.

In plain words
What is it for?
Use it to test Turnstile behavior, iframe positioning, bounded interactions, refresh recovery, and what the surrounding page does after verification.
Why use it?
It provides defined test cases for successful, failed, invisible, and interactive challenge flows without treating a live security check as an ordinary page element.

Skill for Claude CodeCodex

Which agent this was written for is unclear — body not stored (licence); the path alone says nothing.

Good fit Use it to test Turnstile behavior, iframe positioning, bounded interactions, refresh recovery, and what the surrounding page does after verification.

Compare 6 skills from other repositories ↓
Install with agentmods
npx agentmods add skills/jumodada/drissionpage-mcp-server/turnstile-testing
Install

Getting it into your agent

One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.

Any agent
npx skills add jumodada/Drissionpage-MCP-Server --skill turnstile-testing
Clone the repo
git clone --depth 1 https://github.com/jumodada/Drissionpage-MCP-Server

Made for: Claude Code, Codex.

Wrote this? Show the measurements

A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.

agentmods badge for turnstile-testing

README.md
[![agentmods](https://agentmods.dev/badge/skills/jumodada/drissionpage-mcp-server/turnstile-testing/github.svg)](https://agentmods.dev/skills/jumodada/drissionpage-mcp-server/turnstile-testing)
Your own site
<a href="https://agentmods.dev/skills/jumodada/drissionpage-mcp-server/turnstile-testing"><img src="https://agentmods.dev/badge/skills/jumodada/drissionpage-mcp-server/turnstile-testing/github.svg" alt="Measured on agentmods" height="20"></a>

Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.

agentmods 80×15 button for turnstile-testing

Your own site · 80×15
<a href="https://agentmods.dev/skills/jumodada/drissionpage-mcp-server/turnstile-testing"><img src="https://agentmods.dev/badge/skills/jumodada/drissionpage-mcp-server/turnstile-testing.svg" alt="Reviewed on agentmods" width="80" height="20"></a>
Per session 69 Skills are progressive disclosure: only the name and description are preloaded; the body loads when the skill is used.
When invoked 1,478 The whole file, excluding the scripts and references it only reads on demand.
Security scan A 0 findings. A grade says what 26 rules found in the file — not that it is safe.
Origin unknown No closer match found in the catalogue.
Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

ModelPer sessionOnce invoked
Fable 5.1 $0.00069 $0.01478
Opus 5 $0.00034 $0.00739
Sonnet 5 $0.00014 $0.00296
Haiku 4.5 $0.00007 $0.00148

Measured 10d ago against content hash 6f6f3755db32, method: parsed. Prices are Anthropic first-party input rates as of 2026-09-10, from the pricing page.

Security

Grade A, and why

turnstile-testing scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 10d ago.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Nothing flagged

None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.

skills/turnstile-testing/SKILL.md · 132 lines

The source is not reproduced here

A licence we could not identify

The repository carries a LICENSE file, but it is custom or dual enough that GitHub cannot name it and neither can this catalogue. Unknown terms are not permission, so the body is not copied here. Read the licence at the source and decide for yourself.

Read it on GitHub

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. 10d ago First seen · 132 lines · 69 tokens per session scan A 6f6f3755db32

Subscribe to this mod's changes

turnstile-testing is a skill published in the GitHub repository jumodada/Drissionpage-MCP-Server (489 stars, last pushed today), with no licence file. It adds 69 tokens to every session and 1,478 once invoked, about $0.0003 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.

Related

Other skills, from other repositories

browser-use

Direct browser control via CDP for web interaction: automation, scraping, testing, screenshots, and site/app work.

browser-use/browser-use · 26 tokens

pinchtab-dev

Develop and contribute to the PinchTab project. Use when working on PinchTab source code, adding features, fixing bugs, running tests, or preparing PRs. Triggers on "work on pinchtab", "pinchtab development", "contribute to pinchtab", "fix pinchtab bug", "add pinchtab feature".

pinchtab/pinchtab · 77 tokens

actionbook-web-test

Run browser-based web tests against websites using Actionbook CLI. Activate when the user wants to test a website workflow, run smoke tests, verify a user flow, check if a web application works, run regression tests, or validate browser-based interactions. Supports test definition, execution, assertion, reporting, and…

actionbook/actionbook · 71 tokens

qa

QA-test a website or web app and return a 1-5 quality score (5 = flawless, 1 = broken) with evidence. Use when the user wants to test, QA, evaluate, score, or "check how good" a site, page, flow, or app — including a local dev server (e.g. "qa test localhost:5173", "does the checkout work?", "rate this landing page").…

browser-use/browser-use · 103 tokens

browser-viz-verify

Verifies that a NetClaw-generated visualization HTML file (three.js, canvas, drawio, UML, markmap) actually renders correctly — screenshot, console-error check, and an optional Lighthouse audit. Use immediately after generating any browser-based visualization output, to close the QA gap that otherwise requires a human…

automateyournetwork/netclaw · 84 tokens

pinchtab-opt

Run the PinchTab optimization loop (Docker, 3 blind subagents on the runner's HIGH model, 108 steps across 47 groups) against chrome, cloak, ghost-chrome, or all three providers. Pass setup (optionally followed by a provider or all) to run only the setup test (native binary, single subagent forced to the runner's LOW…

pinchtab/pinchtab · 161 tokens