The scanner flagged a possible unsafe import, but the flagged line is just a normal function call within the extension. The extension does what it says: replaces placeholder text with random values. No suspicious imports or external calls were found.
Technical evidence
Scanner reason: JavaScript analysis matched static JavaScript security signal javascript.xray.unsafe-import. The match applies to this repository.
Contextual assessment: Detailed technical wording was omitted by the public report safety filter.
Extension modifies message and prompt content via event handlers as expected for its stated purpose
low risk · high confidence
The extension modifies chat messages and prompts in-place to replace placeholders with random values, which is exactly what the extension is designed to do.
Technical assessment
The extension hooks into SillyTavern events (chatLoaded, user_message_rendered, generate_after_combine_prompts, chat_completion_prompt_ready) to process placeholder text. This is the expected and stated purpose of the extension. The `process` function performs regex-based string replacement of `{{getrand::...}}` and `{{regetrand::...}}` patterns with random values, storing results in a local `sessionVariables` object. No data is sent to external destinations; all modifications are local to the SillyTavern session.