diff --git a/packages/build/src/core/build.ts b/packages/build/src/core/build.ts
index 5697f80734..45f127fca9 100644
--- a/packages/build/src/core/build.ts
+++ b/packages/build/src/core/build.ts
@@ -86,6 +86,7 @@ const tExecBuild = async function ({
   enhancedSecretScan,
   edgeFunctionsBootstrapURL,
   eventHandlers,
+  skewProtectionToken,
 }) {
   const configOpts = getConfigOpts({
     config,
@@ -107,6 +108,7 @@ const tExecBuild = async function ({
     buildId,
     testOpts,
     featureFlags,
+    skewProtectionToken,
   })
 
   const {
diff --git a/packages/build/src/core/config.js b/packages/build/src/core/config.js
index d364442ae2..645dfc3a66 100644
--- a/packages/build/src/core/config.js
+++ b/packages/build/src/core/config.js
@@ -37,6 +37,7 @@ export const getConfigOpts = function ({
   buildId,
   testOpts,
   featureFlags,
+  skewProtectionToken,
 }) {
   return {
     config,
@@ -58,6 +59,7 @@ export const getConfigOpts = function ({
     env: envOpt,
     testOpts,
     featureFlags,
+    skewProtectionToken,
   }
 }
 
diff --git a/packages/build/src/log/messages/config.js b/packages/build/src/log/messages/config.js
index 9aadf3606a..57d273aa2a 100644
--- a/packages/build/src/log/messages/config.js
+++ b/packages/build/src/log/messages/config.js
@@ -60,6 +60,7 @@ const INTERNAL_FLAGS = [
   'edgeFunctionsBootstrapURL',
   'eventHandlers',
   'logger',
+  'skewProtectionToken',
 ]
 const HIDDEN_FLAGS = [...SECURE_FLAGS, ...TEST_FLAGS, ...INTERNAL_FLAGS]
 const HIDDEN_DEBUG_FLAGS = [...SECURE_FLAGS, ...TEST_FLAGS, 'eventHandlers', 'logger']
diff --git a/packages/build/tests/core/fixtures/plugin_echo_env/manifest.yml b/packages/build/tests/core/fixtures/plugin_echo_env/manifest.yml
new file mode 100644
index 0000000000..a3512f0259
--- /dev/null
+++ b/packages/build/tests/core/fixtures/plugin_echo_env/manifest.yml
@@ -0,0 +1,2 @@
+name: test
+inputs: []
diff --git a/packages/build/tests/core/fixtures/plugin_echo_env/netlify.toml b/packages/build/tests/core/fixtures/plugin_echo_env/netlify.toml
new file mode 100644
index 0000000000..4b06556c85
--- /dev/null
+++ b/packages/build/tests/core/fixtures/plugin_echo_env/netlify.toml
@@ -0,0 +1,2 @@
+[[plugins]]
+package = "./plugin.js"
diff --git a/packages/build/tests/core/fixtures/plugin_echo_env/plugin.js b/packages/build/tests/core/fixtures/plugin_echo_env/plugin.js
new file mode 100644
index 0000000000..d7803a34c3
--- /dev/null
+++ b/packages/build/tests/core/fixtures/plugin_echo_env/plugin.js
@@ -0,0 +1,3 @@
+export const onPreBuild = function () {
+  console.log(JSON.stringify(process.env))
+}
diff --git a/packages/build/tests/core/tests.js b/packages/build/tests/core/tests.js
index 0d5b48d3ba..0206688c72 100644
--- a/packages/build/tests/core/tests.js
+++ b/packages/build/tests/core/tests.js
@@ -356,6 +356,14 @@ test('--node-path is not used by core plugins', async (t) => {
   t.snapshot(normalizeOutput(output))
 })
 
+test('--skew-protection-token', async (t) => {
+  const output = await new Fixture('./fixtures/plugin_echo_env')
+    .withFlags({ skewProtectionToken: 'foobar' })
+    .runWithBuild()
+
+  t.true(output.includes(`"NETLIFY_SKEW_PROTECTION_TOKEN":"foobar"`))
+})
+
 test('featureFlags can be used programmatically', async (t) => {
   const output = await new Fixture('./fixtures/empty')
     .withFlags({ featureFlags: { test: true, testTwo: false } })