Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add agents-inc/skills --skill web-data-fetching-swrgit clone --depth 1 https://github.com/agents-inc/skillsWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/agents-inc/skills/web-data-fetching-swr)<a href="https://agentmods.dev/skills/agents-inc/skills/web-data-fetching-swr"><img src="https://agentmods.dev/badge/skills/agents-inc/skills/web-data-fetching-swr/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/agents-inc/skills/web-data-fetching-swr"><img src="https://agentmods.dev/badge/skills/agents-inc/skills/web-data-fetching-swr.svg" alt="Reviewed on agentmods" width="80" height="20"></a>- NVIDIA SkillSpector warn
SkillSpector: 4 findings, up to medium
These are SkillSpector’s own severities. On a checked sample its high-severity flags on skills were ~96% false positives — a documented command, a public API, a “never do X” rule — so we show them as a caution to read, not a verdict. Why →
- medium Excessive Agency · line 16 Skill allows unbounded resource consumption (API calls, storage, compute). Without rate limits or quotas, a compromised or misbehaving agent can cause denial-of-service or cost overruns.Fix: Set explicit rate limits, timeouts, and resource quotas for API calls, file operations, and compute. Implement circuit breakers for runaway loops.
- medium Excessive Agency · line 341 Skill allows unbounded resource consumption (API calls, storage, compute). Without rate limits or quotas, a compromised or misbehaving agent can cause denial-of-service or cost overruns.Fix: Set explicit rate limits, timeouts, and resource quotas for API calls, file operations, and compute. Implement circuit breakers for runaway loops.
- medium Excessive Agency · line 375 Skill allows unbounded resource consumption (API calls, storage, compute). Without rate limits or quotas, a compromised or misbehaving agent can cause denial-of-service or cost overruns.Fix: Set explicit rate limits, timeouts, and resource quotas for API calls, file operations, and compute. Implement circuit breakers for runaway loops.
- medium Excessive Agency · line 385 Skill allows unbounded resource consumption (API calls, storage, compute). Without rate limits or quotas, a compromised or misbehaving agent can cause denial-of-service or cost overruns.Fix: Set explicit rate limits, timeouts, and resource quotas for API calls, file operations, and compute. Implement circuit breakers for runaway loops.
What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00041 | $0.03164 |
| Opus 5 | $0.00020 | $0.01582 |
| Sonnet 5 | $0.00008 | $0.00633 |
| Haiku 4.5 | $0.00004 | $0.00316 |
Grade A, and why
web-data-fetching-swr scanned grade A with 1 finding against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 2d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Makes network callslowCapability
Not a fault in itself. Listed so you know the mod talks to something, and to what.
const response = await fetch(url); How it starts
The opening of the file, as written. The whole thing — 353 lines — stays where its author put it; the contents beside it link to each section on GitHub.
SWR Patterns
Quick Guide: SWR renders the cached value immediately and revalidates behind it, so the cache key is the whole identity of a request and an unstable key is the single most expensive mistake here.
isLoadingcovers the first fetch only andisValidatingcovers every fetch, which is why using the second as a spinner hides the data SWR exists to show. Reads areuseSWR, writes areuseSWRMutation, and anullkey is how a request is skipped without breaking the rules of hooks.
Detailed Resources:
- examples/core.md — fetchers, key shapes, state handling,
SWRConfig - examples/mutations.md —
useSWRMutation, optimistic updates,populateCache, globalmutate - examples/caching.md — revalidation strategies, prefetching, cache persistence
- examples/pagination.md —
useSWRInfinite, infinite scroll, offset and filtered paging - examples/conditional.md — the null key, dependent queries, function keys
- examples/error-handling.md — retry policy, status-specific handling, offline
- examples/suspense.md — suspense mode and server-rendered fallback data
- reference.md — every config option with its default, and the hook return shapes
Which path applies
- Reading a resource —
useSWR, which fetches on mount and keeps the value fresh. Patterns 1–3. - Writing —
useSWRMutation, which does nothing untiltrigger()is called. Pattern 4. - A list that grows —
useSWRInfinite, whosegetKey(pageIndex, previousPage)both builds each page's key and signals the end by returningnull. Pattern 7. - Suspense instead of loading branches —
suspense: truemakes the component suspend anddatanon-null; see examples/suspense.md. Everything else here still applies.
<critical_requirements>
Before writing SWR code
What ships with it
9 files beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 2d ago Changed · -35 lines · +12 tokens per session 008488714cfc
- 5d ago First seen · 388 lines · 29 tokens per session scan A fb203c716074
web-data-fetching-swr is a skill published in the GitHub repository agents-inc/skills (24 stars, last pushed 2d ago), licensed MIT. It adds 41 tokens to every session and 3,164 once invoked, about $0.0002 per session on Opus 5. A static security scan graded it A with 1 finding (makes network calls). No closer match exists in the catalogue, so it is treated as the original; first seen 2026-09-05.
Other skills, from other repositories
moai-design-tools
Design tool integration specialist covering Figma MCP, Pencil renderer, and Pencil-to-code export. Use when fetching design context from Figma, rendering Pencil designs, or exporting to React/Tailwind code.
moai-domain-uiux
UI/UX design systems specialist covering accessibility, icons, theming, design tokens, and user experience patterns. Use when working on design systems, WCAG compliance, ARIA patterns, or dark mode theming.
react-modern
Use this skill when writing or reviewing React 19+ code in WrongStack. Triggers: user mentions "React", "component", "useState", "useEffect", "Server Component", "Client Component", "Suspense", "useTransition", "use hook".
keyboard-accessibility
Load this skill for any project with interactive UI, such as buttons, links, forms, modals, dropdowns, menus, tabs, sliders, toolbars, carousels, or custom widgets, in React or vanilla JavaScript. Never ship an interactive element that cannot be fully operated by keyboard alone. Always ensure a visible focus…
nextjs-16
Build Next.js 16 apps with Turbopack, Cache Components, proxy.ts, Server Actions, React 19.2 View Transitions, and App Router patterns. Covers streaming SSR, ISR, error boundaries, and advanced routing.
frontend-code-review
Review React/TypeScript frontend code against code quality, performance, and business logic rules. Provides structured findings with file paths, line numbers, and suggested fixes.