⚡

// Skill profile

URLSession Code Review

Name: URLSession Code Review
Author: anderskev

name: urlsession-code-review

by anderskev · published 2026-04-01

开发工具数据处理

Total installs

Stars

★ 0

Last updated

2026-04

// Install command

$ claw add gh:anderskev/anderskev-urlsession-code-review

View on GitHub

// Full documentation

---

name: urlsession-code-review

description: Reviews URLSession networking code for iOS/macOS. Covers async/await patterns, request building, error handling, caching, and background sessions.

triggers:

- URLSession

- URLRequest

- URLCache

- URLError

- iOS networking

---

# URLSession Code Review

Quick Reference

| Topic | Reference |

|-------|-----------|

| Async/Await | [async-networking.md](references/async-networking.md) |

| Requests | [request-building.md](references/request-building.md) |

| Errors | [error-handling.md](references/error-handling.md) |

| Caching | [caching.md](references/caching.md) |

Review Checklist

Response Validation

[ ] HTTP status codes validated - URLSession does NOT throw on 404/500

[ ] Response cast to HTTPURLResponse before checking status

[ ] Both transport errors (URLError) and HTTP errors handled

Memory & Resources

[ ] Downloaded files moved/deleted (async API doesn't auto-delete)

[ ] Sessions with delegates call `finishTasksAndInvalidate()`

[ ] Long-running tasks use `[weak self]`

[ ] Stored Task references cancelled when appropriate

Configuration

[ ] `timeoutIntervalForResource` set (default is 7 days!)

[ ] URLCache sized adequately (default 512KB too small)

[ ] Sessions reused for connection pooling

Background Sessions

[ ] Unique identifier (especially with app extensions)

[ ] File-based uploads (not data-based)

[ ] Delegate methods used (not completion handlers)

Security

[ ] No hardcoded secrets (use Keychain)

[ ] Header values sanitized for CRLF injection

[ ] Query params via URLComponents (not string concat)

Output Format

### Critical
1. [FILE:LINE] Missing HTTP status validation
   - Issue: 404/500 responses not treated as errors
   - Fix: Check `httpResponse.statusCode` is 200-299

// Comments

// Related skills

More tools from the same signal band

Order food/drinks (点餐) on an Android device paired as an OpenClaw node. Uses in-app menu and cart; add goods, view cart, submit order (demo, no real payment).

Sign plugins, rotate agent credentials without losing identity, and publicly attest to plugin behavior with verifiable claims and authenticated transfers.

The philosophical layer for AI agents. Maps behavior to Spinoza's 48 affects, calculates persistence scores, and generates geometric self-reports. Give your...

日历管理数据处理

1 installs★ 0