Skip to content
Get packs

Form CAPTCHA Protection Checker

Reviews public web forms for missing bot and abuse protection like CAPTCHA and rate limiting

Source Download skill
Repository
thedaviddias/Front-End-Checklist
Stars
74,632
Licence
MIT
Files
2 files

What it does

Once installed, the agent checks public-facing web forms (contact, sign-up, login, password reset, comments) to see whether they have bot protection such as a CAPTCHA, honeypot fields, or server-side rate limiting. It also checks that any CAPTCHA token is verified on the server, and suggests fixes using services like Cloudflare Turnstile, hCaptcha, or Google reCAPTCHA v3. It is a checklist-style guide for review, not an automated scanner.

Great for

  • Developers building or maintaining sign-up, login, or contact forms who want a security review
  • Teams auditing a website for spam and credential-stuffing exposure
  • Students learning why bot protection on forms matters

Skip it if

  • Testing live sites for vulnerabilities without permission, since the skill only gives review guidance and reviewing someone else's forms without authorization may be unlawful
  • Forms behind authentication, which the skill says do not need this treatment
  • Projects expecting a complete security audit, because the skill covers only one narrow topic and its main text is brief with details deferred to a reference file

Try asking

  • “Review my contact and registration forms for bot protection and tell me what is missing”
  • “Check whether my login form validates the CAPTCHA token on the server”
  • “Suggest how to add Cloudflare Turnstile to my sign-up form”
  • “Explain the trade-offs between reCAPTCHA v2, v3, and honeypot fields for my site”
Step-by-step guide: how to use Form CAPTCHA Protection CheckerInstall, first run, examples, tips and FAQs

Install in 3 steps

  1. 1

    Download the skill

    The ZIP contains the 2 original files, the MIT licence and an attribution note.

    form-captcha.zip
  2. 2

    Add it to your agent

    Claude Code (all projects)

    mkdir -p ~/.claude/skills && unzip form-captcha.zip -d ~/.claude/skills/

    Claude Code / Agent SDK (this project only)

    mkdir -p .claude/skills && unzip form-captcha.zip -d .claude/skills/

    Claude apps (web/desktop): Settings → Capabilities → Skills → Upload skill, and choose the ZIP.

  3. 3

    Ask for the task

    No special command needed — the agent reads the skill's description and loads it when your request matches. Try one of the prompts above.

Get better results

  • Give the agent your form HTML and server-side handler code so it can check token validation, not just the front end.
  • Ask for a list of public forms first, then review each one, since the checklist is applied per form.
  • Treat the suggestions as a starting point and confirm CAPTCHA service setup against each vendor's current documentation.

What's inside

  • references/rule.md
  • SKILL.md

Redistributed unmodified from thedaviddias/Front-End-Checklist under the MIT licence. The assessment was drafted with AI from the skill's files on 2026-10-29. Skills can instruct your agent to run code — read SKILL.md and any scripts before installing.