urlsession-code-review

What This Skill Does

The urlsession-code-review skill is a specialized static analysis tool designed to audit networking code written in Swift for iOS and macOS. It acts as an automated peer reviewer, focusing specifically on Apple’s URLSession framework. The skill leverages a comprehensive checklist to identify common pitfalls such as failure to validate HTTP status codes, memory leaks stemming from improper delegate management, and security vulnerabilities like CRLF injection or insecure URL construction. It also checks for performance best practices, such as session reuse, appropriate resource timeout intervals, and efficient URLCache management.

Installation

To integrate this skill into your OpenClaw environment, execute the following command in your terminal: clawhub install openclaw/skills/skills/anderskev/urlsession-code-review

Use Cases

This skill is ideal for:

• Senior engineers conducting PR reviews to ensure consistency and best practices across a team.
• Junior developers seeking feedback on networking architecture before merging new features.
• Audit teams performing security reviews on legacy codebases to identify potential data leakage or resource mismanagement.
• Developers refactoring older completion-handler based networking logic into modern Swift Concurrency patterns.

Example Prompts

1. "Review my network service layer. I'm using URLSession.shared for everything and I'm worried about background tasks."
2. "Check this file for potential memory leaks and make sure I'm handling 404 and 500 errors correctly: [Paste Code]"
3. "Does my URLSessionConfiguration meet the best practices for a high-traffic image downloader?"

Tips & Limitations

• Context is key: When requesting a review, provide the specific implementation of your URLSessionConfiguration if possible, as it significantly impacts the validity of the audit.
• Limitations: While the skill is excellent at identifying logic errors and anti-patterns, it cannot verify the behavior of remote servers; it assumes you have documented your expected API contract.
• Security: This skill does not replace a professional security audit. Always ensure your app performs SSL pinning if you are handling sensitive user data, as this skill focuses on standard URLSession implementation patterns.