recently-viewed-products
Pass
Audited by Gen Agent Trust Hub on Mar 16, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill implements client-side tracking using browser storage (localStorage and sessionStorage). It follows best practices by storing only product IDs and timestamps rather than full product objects, which prevents data staleness and reduces the storage footprint.
- [SAFE]: The server-side API handler includes input validation, specifically checking that the 'ids' parameter is an array and limiting its length to 20 items. This is a good practice to prevent resource exhaustion or Denial of Service (DoS) attacks.
- [SAFE]: The skill includes privacy-conscious implementation options, such as using sessionStorage for GDPR compliance and handling private browsing modes gracefully with try/catch blocks and cookie-based fallbacks.
- [SAFE]: Frontend implementation follows React/Next.js best practices for SSR by ensuring that browser-only APIs like localStorage are accessed within useEffect hooks to prevent hydration mismatches.
Audit Metadata