Does URLSession throw errors for 404 or 500 responses?

No, URLSession only throws errors for transport-level issues. This skill ensures you are manually validating the HTTPURLResponse status code.

Does it support modern Swift concurrency?

Yes, it provides guidance and review patterns for using the async/await versions of the URLSession data, download, and upload tasks.

Can this skill help with background upload and download tasks?

Yes, it specifically checks for unique session identifiers, file-based uploads, and proper delegate usage required for background sessions.

Why is it flagging my timeout intervals?

The default 'timeoutIntervalForResource' is 7 days; this skill suggests more appropriate values to prevent resource leaks and improve user experience.

What security vulnerabilities does this skill look for?

It identifies hardcoded secrets, lack of Keychain integration, potential CRLF injection in headers, and insecure string concatenation in URLs.

URLSession Networking Review

Name: URLSession Networking Review
Author: existential-birds

byexistential-birds

•

Mobile Development

Reviews iOS and macOS networking code to ensure robust URLSession implementations, proper error handling, and secure data transmission.

关于

The URLSession Code Review skill provides an automated audit for Apple platform networking implementations. It specifically targets common pitfalls in iOS and macOS development, such as failing to validate HTTP status codes, improper memory management in background sessions, and security vulnerabilities like hardcoded secrets or CRLF injection. By analyzing async/await patterns and URLRequest configurations, this skill helps developers move from basic networking to production-grade, performant, and secure communication layers.

主要功能

Security analysis for credential handling and header sanitization
Memory management checks for background tasks and delegates
14 GitHub stars
Optimization of URLCache and timeout configurations
HTTP status code and response validation auditing
Verification of modern Swift async/await networking patterns

使用场景

Auditing legacy completion-handler code during async/await migration
Ensuring secure API request building and sensitive data handling
Validating background download/upload logic for iOS app extensions

关于

主要功能

Security analysis for credential handling and header sanitization
Memory management checks for background tasks and delegates
14 GitHub stars
Optimization of URLCache and timeout configurations
HTTP status code and response validation auditing
Verification of modern Swift async/await networking patterns

使用场景

Auditing legacy completion-handler code during async/await migration
Ensuring secure API request building and sensitive data handling
Validating background download/upload logic for iOS app extensions