Urlsession Code Review
v1.2.0Reviews URLSession networking code for iOS/macOS. Covers async/await patterns, request building, error handling, caching, and background sessions.
⭐ 0· 82·0 current·0 all-time
byKevin Anderson@anderskev
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
Name/description (URLSession code review) match the contents: a review checklist and multiple reference docs about async/await, request building, error handling, caching, and background sessions. There are no unexpected required binaries, env vars, or config paths.
Instruction Scope
SKILL.md contains review guidance, checklists, and an output template. It does not instruct the agent to read system files, credentials, or other unrelated resources, nor does it direct data to external endpoints. It assumes the agent will be given source code to review, which is appropriate for a code-review skill.
Install Mechanism
No install spec and no code files that execute — this is instruction-only, so nothing is downloaded or written to disk during install. Lowest-risk installation model.
Credentials
The skill declares no required environment variables or credentials. Reference docs mention using Keychain (recommended for apps) but the skill does not request Keychain access or any tokens itself.
Persistence & Privilege
No special privileges requested. always is false (default) and autonomous invocation is allowed (platform default); the skill does not request permanent presence or modifications to other skills or system settings.
Assessment
This skill appears internally consistent and low-risk: it's a local instruction/reference resource for reviewing URLSession code. Before installing, note that the skill's source/homepage are unknown — if provenance matters to you, prefer skills from known authors. When using it, avoid pasting secrets or live keys into code you ask the agent to review (the skill recommends Keychain usage but will not itself access Keychain or environment variables). If you plan to let the agent run autonomously, remember autonomous invocation is the platform default; this particular skill doesn't add privileges beyond that, but always avoid providing real credentials or production-only endpoints in review snippets.Like a lobster shell, security has layers — review code before you run it.
latestvk975qtjfzedhrrqvtbehh1tzjs83cn3t
License
MIT-0
Free to use, modify, and redistribute. No attribution required.