No material or immediate-danger concern was identified in this review.
This advisory report describes what the named tools and review process found at one exact commit. Unknown or unobserved behavior may still exist.
0 immediate danger
0 material
1 low
What this review found
No material or immediate-danger item was identified.
Contextual expected matches (1)
JavaScript analysis reported javascript.xray.obfuscated-code
Expected behavior · high confidence
A scanner thought the code might be hiding something, but the actual code is plain and readable JavaScript. There is no hidden or disguised code.
Technical evidence
Scanner reason: JavaScript analysis matched static JavaScript security signal javascript.xray.obfuscated-code. The match applies to this repository.
Contextual assessment: JS-X-Ray flagged this as an obfuscated-code signal at line 1, but the supplied source context shows standard ES module imports and straightforward extension boilerplate. No minified, packed, eval-based, or encoded constructs are present. Scanner confidence was low and the signal is a false positive against normal readable code.
Impact: none · Exploitability: unlikely
Developer action: none
Scanner javascript-analysis webcrack-2.16.0_js-x-ray-16.0.0_signatures-1_literals-1_families-1
Rule javascript.xray.obfuscated-code
File role production
Source index.js:1
Coverage and limitations
Inventory 38 files · 390306 bytes
Contextual coverage 1 of 1 candidates assessed
JavaScript coverage
Status Complete
Candidates 1 files · 82509 bytes
X-Ray review families 1 warning occurrences compacted to 1 evidence-preserving review families
Representations 1 raw · 0 decoded · 0 normalized · 0 bundle modules
Stage scans 1 raw signatures · 1 raw AST · 1 raw OpenGrep · 0 derived signatures · 0 derived AST · 0 derived OpenGrep
Tools
Limitations
This advisory review cannot prove the absence of unknown behavior.
Technical scan identity
Full commit c593986c315c60292f8f4b888d1fdda65517ba6c Completed Sep 25, 2026 History depth 1 commit
Method Deterministic evidence with contextual review
Reviewer nano-gpt.com · zai-org/glm-latest
Scanner 0.1.0
Scanner policy 5
Rule catalog 2
Contextual policy 5
Ecosystem context sillytavern-community-v1
Prompt contextual-review-v7
Assessment schema contextual-assessment-v2
Review provenance 0 fresh / 1 reused groups · 0 fresh / 1 reused candidates
Review source reports 2bc52c8f33c2e1a985d4457e19e07f0c60e28e2e82be0f76d8531ffed23a8f3fEvidence triage 0 deterministic / 1 contextual candidates · 1 contextual / 1 total behavior cases
Model budget 0 model calls · 0 / 12 fresh cases · 0 / 200000 estimated input · 0 / 250000 actual input · 0 / 40000 output tokens
Review usage 0 input · 0 output · 0 cache read · 0 reasoning tokens
Report 760316656ffb655157a48fa5301c7843da9ecd6f20e02ebcd1538caa615eb342