跳到主要内容
知仓学习社ZHICANG

native-data-fetching

Use when implementing or debugging ANY network request, API call, or data fetching. Covers fetch API, React Query, SWR, error handling, caching, off…

读凭据严重 10 · 高危 0sickn33/agentic-awesome-skills

它会碰到什么

扫了多少4 个文本文件,23 KB
它会碰到什么读凭据
命中总数24 处
命中统计严重 10 · 高 0 · 中 0 · 低 0
逐条看命中(10 条严重或高危)
  • 严重 references/detailed-guide.md:291cred-paths
    // .env
  • 严重 references/detailed-guide.md:307cred-paths
    // .env.development
  • 严重 references/detailed-guide.md:310cred-paths
    // .env.production
  • 严重 references/detailed-guide.md:348cred-paths
    - Restart the dev server after changing `.env` files
  • 严重 references/detailed-guide.md:428cred-paths
    |   |-- Client-side URLs -> EXPO_PUBLIC_ prefix in .env
  • 严重 references/detailed-guide.md:430cred-paths
    |   \-- Multiple environments -> .env.development, .env.production
  • 严重 references/detailed-guide.md:430cred-paths
    |   \-- Multiple environments -> .env.development, .env.production
  • 严重 SKILL.md:51cred-paths
    -> Use EXPO*PUBLIC* env vars with .env.development and .env.production files
  • 严重 SKILL.md:51cred-paths
    -> Use EXPO*PUBLIC* env vars with .env.development and .env.production files
  • 严重 SKILL.md:53cred-paths
    -> Client-safe keys: EXPO*PUBLIC* in .env. Secret keys: non-prefixed env vars in API routes only

这一栏是扫描器报的事实,不是结论。命中多不等于有毒(安全工具、规则库、示例脚本本来就会包含危险写法),命中少也不等于干净。它和你手上的凭据、文件、网络有什么关系,需要你自己看。

技能内容

Expo Networking

You MUST use this skill for ANY networking work including API requests, data fetching, caching, or network debugging.

Detailed Guide

Read [the detailed guide](references/detailed-guide.md) before executing this skill. It retains the complete procedure and reference material. Treat its safety, prerequisites, and validation requirements as mandatory. For focused work, load the relevant sections; for end-to-end work, read the guide completely.

When to Use

Use this skill when:

  • Implementing API requests
  • Setting up data fetching (React Query, SWR)
  • Using Expo Router data loaders (useLoaderData, web SDK 55+)
  • Debugging network failures
  • Implementing caching strategies
  • Handling offline scenarios
  • Authentication/token management
  • Configuring API URLs and environment variables

Example Invocations

User: "How do I make API calls in React Native?"

-> Use fetch, wrap with error handling

User: "Should I use React Query or SWR?"

-> React Query for complex apps, SWR for simpler needs

User: "My app needs to work offline"

-> Use NetInfo for status, React Query persistence for caching

User: "How do I handle authentication tokens?"

-> Store in expo-secure-store, implement refresh flow

User: "API calls are slow"

-> Check caching strategy, use React Query staleTime

User: "How do I configure different API URLs for dev and prod?"

-> Use EXPOPUBLIC env vars with .env.development and .env.production files

User: "Where should I put my API key?"

-> Client-safe keys: EXPOPUBLIC in .env. Secret keys: non-prefixed env vars in API routes only

User: "How do I load data for a page in Expo Router?"

-> See references/expo-router-loaders.md for route-level loaders (web, SDK 55+). For native, use React Query or fetch.

Limitations

  • Use this skill only when the task clearly matches its upstream product or API scope.
  • Verify commands, API behavior, pricing, quotas, credentials, and deployment effects against current official documentation before making changes.
  • Do not treat generated examples as a substitute for environment-specific tests, security review, or user approval for destructive or costly actions.

想直接用这个技能?

本站把开放许可(MIT / Apache 等)的技能按仓库打包整理到网盘,点一下转存到你自己的网盘,不用一个个从 GitHub 拉。许可未声明的技能只给原始仓库链接,不打包。

同名技能的其他版本

有 3 个不同仓库或目录里都有叫 native-data-fetching 的技能。它们内容并不相同,别混用: