The flagged code fetches the extension's own local files (manifest.json and settings.html) from its own directory. This is normal behavior for a SillyTavern extension and does not involve any dangerous code execution or external network calls.
Technical evidence
Scanner reason: JavaScript analysis matched static JavaScript security signal javascript.download-to-execution. The match applies to this repository.
Contextual assessment: The scanner correlates a network retrieval primitive (fetch in get_manifest, $.get in load_settings_html) with a perceived execution sink. However, all fetch destinations are derived from import.meta.url pointing to the extension's own local directory (manifest.json, settings.html). These are same-origin local file reads with no attacker-controlled input. The String.fromCharCode in unescape_string is not a code execution sink. jQuery .append() of the extension's own settings.html is standard SillyTavern extension UI loading. No eval, Function constructor, or dynamic code execution is present in the data flow. The scanner's correlation is a false positive.