TavernKeeper Scan Report

kangjoseph90/Risu-Antigravity

Commit 3f77962 Reviewed

1 material concern identified.

This advisory report describes what the named tools and contextual reviewer found at one exact commit. Unknown or unobserved behavior may still exist.

0 immediate danger 1 material 33 low

What this review found

Dependency advisory GHSA-fx2h-pf6j-xcff applies

Material concern · medium confidence

A high-severity security issue was found in a package this plugin uses to open web pages for login. On Windows computers, this package could be tricked into running unwanted commands if a malicious link is opened through it. Since this plugin uses the package for its login flow, there is a real chance this could be exploited, though the exact risk depends on how the plugin constructs the login URLs.

Technical evidence

Scanner reason: OSV-Scanner matched advisory GHSA-fx2h-pf6j-xcff to a dependency declared by this repository.

Contextual assessment: A high-severity advisory was matched against a declared dependency. Among the production dependencies in this lockfile, the open package at version range caret 11.0.0 is the most likely candidate, as it has a known high-severity advisory involving command injection on Windows when opening URLs containing specially crafted characters. The open package is a production dependency used by this plugin to launch browser-based authentication flows for Google Antigravity login. If any URL passed to open is constructed from server responses, redirect parameters, or other externally influenced data, an attacker could potentially trigger arbitrary command execution on Windows hosts. The exact resolved version in the lockfile and the source code calling open are not visible in the supplied evidence, so runtime reachability of attacker-controlled input cannot be fully confirmed. The impact of command injection is high, and exploitability is plausible given the authentication flow context, but confidence is medium due to the missing package identity and source code.

Impact: high · Exploitability: plausible

Developer action: Update the open dependency to the latest patched version and ensure that any URL passed to it is a hardcoded or strictly validated Google authentication endpoint, rejecting any URL containing shell metacharacters or unexpected schemes.

Scanner
osv-scanner 2.4.0
Rule
GHSA-fx2h-pf6j-xcff
File role
production
Source
package-lock.json

Minor cautions

Dependency advisory GHSA-v6wh-96g9-6wx3 applies

Minor caution · medium confidence

A security issue was found in the Svelte UI framework used by this plugin. The framework code is included in the final plugin file, but the specific issue would only matter if the plugin displayed web links or content from untrusted sources, which this plugin does not appear to do.

Technical evidence

Scanner reason: OSV-Scanner matched advisory GHSA-v6wh-96g9-6wx3 to a dependency declared by this repository.

Contextual assessment: This advisory corresponds to a Svelte runtime vulnerability (href/XSS sanitization). Svelte is declared as a direct production dependency at ^4.2.0 and is bundled into the shipped extension artifact. The vulnerable runtime code is therefore present in the output, but this extension is a model-provider plugin for RisuAI that handles authentication and model selection; it is unlikely to render attacker-controlled URLs or untrusted content in Svelte templates that would trigger the vulnerable code path.

Impact: low · Exploitability: unlikely

Developer action: Update svelte to a patched version when convenient.

Scanner
osv-scanner 2.4.0
Rule
GHSA-v6wh-96g9-6wx3
File role
production
Source
package-lock.json

Dependency advisory GHSA-phwv-c562-gvmh applies

Minor caution · medium confidence

A security issue was found in the Svelte UI framework used by this plugin. The issue is present in the final plugin file but is unlikely to be triggered because the plugin does not display untrusted web content.

Technical evidence

Scanner reason: OSV-Scanner matched advisory GHSA-phwv-c562-gvmh to a dependency declared by this repository.

Contextual assessment: This advisory corresponds to a Svelte runtime vulnerability. Svelte is a direct production dependency (^4.2.0) and its code is bundled into the shipped extension. The vulnerable code is present in the artifact, but the extension functions as a chat-completion provider plugin handling auth tokens and model lists, making it unlikely that attacker-controlled content reaches the vulnerable Svelte rendering path.

Impact: low · Exploitability: unlikely

Developer action: Update svelte to a patched version when convenient.

Scanner
osv-scanner 2.4.0
Rule
GHSA-phwv-c562-gvmh
File role
production
Source
package-lock.json

Gitleaks reported generic-api-key

Minor caution · high confidence

The code contains a Google login secret that is built into the plugin. This is not ideal because anyone who looks inside the plugin file can see it. However, for this type of app-based Google login, Google's own system expects that this secret cannot be kept fully private, so the real-world risk is low. It is used only to let users log in, not for anything hidden or harmful.

Technical evidence

Scanner reason: Gitleaks matched secret-detection rule generic-api-key in this repository.

Contextual assessment: The matched value is a Google OAuth client secret hardcoded alongside a client ID for an OAuth flow used by this RisuAI plugin to authenticate users against Google Antigravity. For installed/desktop-style applications, Google's own OAuth 2.0 model acknowledges that the client secret cannot be kept truly confidential and functions more as a static parameter than a protected secret. The secret is distributed in the built bundle by design. While hardcoding credentials in source is poor practice and the secret is visible to anyone who inspects the bundle, the practical impact is limited because this is an installed-application OAuth flow rather than a server-side confidential client. No exfiltration, concealment, or malicious data flow is present; the credential is used for its stated authentication purpose.

Impact: low · Exploitability: unlikely

Developer action: Avoid hardcoding the OAuth client secret in source. Where possible, use Google's recommended approach for installed applications or load the credential from configuration. Rotate the exposed client secret if abuse is a concern.

Scanner
gitleaks 8.30.1
Rule
generic-api-key
File role
production
Source
src/auth/index.ts:18

Dependency advisory GHSA-rcqx-6q8c-2c42 applies

Minor caution · medium confidence

A security issue was found in the Svelte UI framework used by this plugin. The framework code is in the final plugin file, but the plugin's functionality does not create conditions where the issue could be exploited.

Technical evidence

Scanner reason: OSV-Scanner matched advisory GHSA-rcqx-6q8c-2c42 to a dependency declared by this repository.

Contextual assessment: This advisory corresponds to a Svelte runtime vulnerability. Svelte is a direct production dependency (^4.2.0) bundled into the shipped extension. The vulnerable runtime code is included in the artifact, but the extension is a provider plugin for RisuAI that manages authentication and model configuration, not rendering of untrusted external content, so the vulnerable path is unlikely to be reached.

Impact: low · Exploitability: unlikely

Developer action: Update svelte to a patched version when convenient.

Scanner
osv-scanner 2.4.0
Rule
GHSA-rcqx-6q8c-2c42
File role
production
Source
package-lock.json

Dependency advisory GHSA-4w7w-66w2-5vf9 applies

Minor caution · medium confidence

A security issue was found in the Svelte UI framework used by this plugin. The issue exists in the shipped plugin file but is unlikely to be triggered by the plugin's normal operation.

Technical evidence

Scanner reason: OSV-Scanner matched advisory GHSA-4w7w-66w2-5vf9 to a dependency declared by this repository.

Contextual assessment: This advisory corresponds to a Svelte runtime vulnerability. Svelte is a direct production dependency (^4.2.0) and is bundled into the shipped extension. The vulnerable code is present in the output artifact, but this provider plugin handles auth tokens and model selection rather than rendering untrusted user-supplied content, so exploitation is unlikely.

Impact: low · Exploitability: unlikely

Developer action: Update svelte to a patched version when convenient.

Scanner
osv-scanner 2.4.0
Rule
GHSA-4w7w-66w2-5vf9
File role
production
Source
package-lock.json

Dependency advisory GHSA-m56q-vw4c-c2cp applies

Minor caution · medium confidence

A security issue was found in the Svelte UI framework used by this plugin. The framework code is included in the final plugin, but the plugin does not display untrusted content that could trigger the issue.

Technical evidence

Scanner reason: OSV-Scanner matched advisory GHSA-m56q-vw4c-c2cp to a dependency declared by this repository.

Contextual assessment: This advisory corresponds to a Svelte runtime vulnerability. Svelte is a direct production dependency (^4.2.0) bundled into the shipped extension. The vulnerable runtime code is in the artifact, but the extension is a model-provider plugin for RisuAI focused on authentication and model configuration, making it unlikely that attacker-controlled content reaches the vulnerable rendering path.

Impact: low · Exploitability: unlikely

Developer action: Update svelte to a patched version when convenient.

Scanner
osv-scanner 2.4.0
Rule
GHSA-m56q-vw4c-c2cp
File role
production
Source
package-lock.json

Dependency advisory GHSA-7r86-cg39-jmmj applies

Minor caution · medium confidence

Detailed wording was omitted by the public report safety filter.

Technical evidence

Scanner reason: OSV-Scanner matched advisory GHSA-7r86-cg39-jmmj to a dependency declared by this repository.

Contextual assessment: OSV-scanner matched a high-severity advisory against a dependency in the lockfile. The provided source excerpt shows the root package and early lockfile entries but does not include the specific flagged package or its version. The project is a RisuAI browser plugin whose build output is a single bundled JS file; most declared dependencies are devDependencies (vite, terser, tailwind, postcss, etc.) that do not ship to end users. Without identifying the specific package and confirming it is a runtime dependency with reachable vulnerable code, concrete end-user harm cannot be established. The advisory likely affects a build-time tool with no runtime reachability in the shipped plugin.

Impact: low · Exploitability: unlikely

Developer action: Update the flagged dependency to a patched version during the next build cycle. Run npm audit to identify the specific package and version.

Scanner
osv-scanner 2.4.0
Rule
GHSA-7r86-cg39-jmmj
File role
production
Source
package-lock.json

Dependency advisory GHSA-6g55-p6wh-862q applies

Minor caution · medium confidence

A scanner flagged a vulnerable dependency, but the affected package is likely a development tool that does not end up in the final plugin file users import. The risk to end users is probably low.

Technical evidence

Scanner reason: OSV-Scanner matched advisory GHSA-6g55-p6wh-862q to a dependency declared by this repository.

Contextual assessment: OSV-scanner matched a high-severity advisory against a lockfile dependency. The specific package and version are not visible in the provided source excerpt. The project ships a bundled JS artifact for RisuAI; the majority of dependencies are build-time devDependencies. Runtime dependencies are limited to lucide-svelte, open, svelte, and tsx. Without confirming the flagged package is among runtime dependencies and that attacker-controlled input reaches the vulnerable code path in the browser extension context, runtime impact cannot be established.

Impact: low · Exploitability: unlikely

Developer action: Update the flagged dependency to a patched version during the next build cycle. Run npm audit to identify the specific package and version.

Scanner
osv-scanner 2.4.0
Rule
GHSA-6g55-p6wh-862q
File role
production
Source
package-lock.json

Dependency advisory GHSA-67mh-4wv8-2f99 applies

Minor caution · medium confidence

A scanner found a medium-severity vulnerability in a dependency. Since this project produces a bundled file and most dependencies are build tools, the issue likely does not affect users of the final plugin.

Technical evidence

Scanner reason: OSV-Scanner matched advisory GHSA-67mh-4wv8-2f99 to a dependency declared by this repository.

Contextual assessment: OSV-scanner matched a medium-severity advisory against a lockfile dependency. The specific package is not identifiable from the provided source excerpt. Given the project structure (browser extension with bundled output and predominantly devDependencies), the vulnerable code is unlikely to reach end users. No attacker-controlled input path to the vulnerable code has been demonstrated.

Impact: low · Exploitability: unlikely

Developer action: Update the flagged dependency to a patched version during the next build cycle. Run npm audit to identify the specific package and version.

Scanner
osv-scanner 2.4.0
Rule
GHSA-67mh-4wv8-2f99
File role
production
Source
package-lock.json

Dependency advisory GHSA-r28c-9q8g-f849 applies

Minor caution · medium confidence

A scanner flagged a high-severity vulnerability in a dependency, but the affected package is most likely a development tool that does not ship in the final plugin. The risk to end users appears low.

Technical evidence

Scanner reason: OSV-Scanner matched advisory GHSA-r28c-9q8g-f849 to a dependency declared by this repository.

Contextual assessment: OSV-scanner matched a high-severity advisory against a lockfile dependency. The specific package and version are not visible in the provided source excerpt. The project is a RisuAI plugin that bundles its output; most dependencies are devDependencies not present in the shipped artifact. Without identifying the flagged package and confirming runtime reachability in the browser extension context, concrete user harm cannot be established.

Impact: low · Exploitability: unlikely

Developer action: Update the flagged dependency to a patched version during the next build cycle. Run npm audit to identify the specific package and version.

Scanner
osv-scanner 2.4.0
Rule
GHSA-r28c-9q8g-f849
File role
production
Source
package-lock.json

Dependency advisory GHSA-f7gr-6p89-r883 applies

Minor caution · medium confidence

A scanner found a medium-severity vulnerability in a dependency. This likely affects a build tool rather than the final plugin users import, so the risk is probably low.

Technical evidence

Scanner reason: OSV-Scanner matched advisory GHSA-f7gr-6p89-r883 to a dependency declared by this repository.

Contextual assessment: OSV-scanner matched a medium-severity advisory against a lockfile dependency. The specific package is not identifiable from the provided source excerpt. The project bundles its output for RisuAI and most dependencies are build-time devDependencies. No runtime reachability or attacker-controlled input path has been demonstrated for the vulnerable code in the shipped artifact.

Impact: low · Exploitability: unlikely

Developer action: Update the flagged dependency to a patched version during the next build cycle. Run npm audit to identify the specific package and version.

Scanner
osv-scanner 2.4.0
Rule
GHSA-f7gr-6p89-r883
File role
production
Source
package-lock.json

Dependency advisory GHSA-3v7f-55p6-f55p applies

Minor caution · medium confidence

A scanner found a medium-severity vulnerability in a dependency. Since the project bundles its output and most dependencies are build tools, the issue likely does not affect end users.

Technical evidence

Scanner reason: OSV-Scanner matched advisory GHSA-3v7f-55p6-f55p to a dependency declared by this repository.

Contextual assessment: OSV-scanner matched a medium-severity advisory against a lockfile dependency. The specific package is not visible in the provided source excerpt. The project produces a bundled JS file for RisuAI with mostly devDependencies. Without confirming the flagged package is a runtime dependency with reachable vulnerable code, end-user impact cannot be established.

Impact: low · Exploitability: unlikely

Developer action: Update the flagged dependency to a patched version during the next build cycle. Run npm audit to identify the specific package and version.

Scanner
osv-scanner 2.4.0
Rule
GHSA-3v7f-55p6-f55p
File role
production
Source
package-lock.json

Dependency advisory GHSA-mw96-cpmx-2vgc applies

Minor caution · medium confidence

A scanner flagged a high-severity vulnerability in a dependency. The affected package is likely a development tool that does not ship in the final plugin, so the risk to users appears low.

Technical evidence

Scanner reason: OSV-Scanner matched advisory GHSA-mw96-cpmx-2vgc to a dependency declared by this repository.

Contextual assessment: OSV-scanner matched a high-severity advisory against a lockfile dependency. The specific package and version are not identifiable from the provided source excerpt. The project is a browser extension plugin that ships a bundled JS artifact; the majority of dependencies are devDependencies. Without confirming the flagged package is a runtime dependency with reachable vulnerable code and attacker-controlled input, concrete user harm cannot be established.

Impact: low · Exploitability: unlikely

Developer action: Update the flagged dependency to a patched version during the next build cycle. Run npm audit to identify the specific package and version.

Scanner
osv-scanner 2.4.0
Rule
GHSA-mw96-cpmx-2vgc
File role
production
Source
package-lock.json

Dependency advisory GHSA-f886-m6hf-6m8v applies

Minor caution · medium confidence

A scanner found a medium-severity vulnerability in a dependency. This most likely affects a build tool rather than the final plugin, so the risk to end users is probably low.

Technical evidence

Scanner reason: OSV-Scanner matched advisory GHSA-f886-m6hf-6m8v to a dependency declared by this repository.

Contextual assessment: OSV-scanner matched a medium-severity advisory against a lockfile dependency. The specific package is not visible in the provided source excerpt. The project bundles its output for RisuAI and most dependencies are build-time devDependencies. No runtime reachability or attacker-controlled input path to the vulnerable code has been demonstrated in the shipped artifact.

Impact: low · Exploitability: unlikely

Developer action: Update the flagged dependency to a patched version during the next build cycle. Run npm audit to identify the specific package and version.

Scanner
osv-scanner 2.4.0
Rule
GHSA-f886-m6hf-6m8v
File role
production
Source
package-lock.json

Dependency advisory GHSA-5j98-mcp5-4vw2 applies

Minor caution · medium confidence

A build tool used when creating this extension has a known security issue, but it only affects the development process, not the final product that users install. The vulnerable tool is not part of what gets shipped to users.

Technical evidence

Scanner reason: OSV-Scanner matched advisory GHSA-5j98-mcp5-4vw2 to a dependency declared by this repository.

Contextual assessment: This advisory corresponds to a known vulnerability in a build-toolchain transitive dependency (tar path traversal during extraction). The package is used only during npm install and build steps. The shipped artifact is a bundled browser extension JS file that does not include or execute this dependency at runtime. No attacker-controlled input reaches the vulnerable code in the context of end users importing the built extension.

Impact: low · Exploitability: unlikely

Developer action: Update the affected build dependency to a patched version during the next maintenance cycle.

Scanner
osv-scanner 2.4.0
Rule
GHSA-5j98-mcp5-4vw2
File role
production
Source
package-lock.json

Dependency advisory GHSA-qx2v-qp2m-jg93 applies

Minor caution · medium confidence

A helper tool used during the build process has a performance-related security flaw. It does not affect the finished extension that users load into their application.

Technical evidence

Scanner reason: OSV-Scanner matched advisory GHSA-qx2v-qp2m-jg93 to a dependency declared by this repository.

Contextual assessment: This advisory matches a ReDoS vulnerability in cross-spawn, a transitive dev dependency used during build. The vulnerable code is not bundled into the production extension output and has no runtime reachability for end users. Attacker control over input is limited to the local development environment.

Impact: low · Exploitability: unlikely

Developer action: Update the affected build dependency to a patched version during the next maintenance cycle.

Scanner
osv-scanner 2.4.0
Rule
GHSA-qx2v-qp2m-jg93
File role
production
Source
package-lock.json

Gitleaks reported generic-api-key

Minor caution · medium confidence

This is a Google login secret built into the plugin so it can sign users into Google Antigravity. Google's own rules say this kind of app secret is not truly private because it lives inside software users run locally, so it is not a stolen server password. Still, it is better practice not to store secrets directly in the code.

Technical evidence

Scanner reason: Gitleaks matched secret-detection rule generic-api-key in this repository.

Contextual assessment: The flagged line is a Google OAuth client secret constant used alongside a client ID for the plugin's stated Google Antigravity OAuth login flow. The matched value was redacted in the supplied evidence, so the actual secret is not present here. For installed/desktop-style OAuth applications, Google treats the client secret as non-confidential because it is shipped to clients, so hardcoding it is a common pattern rather than a server-side credential leak. It is still preferable to avoid committing secrets to source and to rotate if the value was published.

Impact: low · Exploitability: unlikely

Developer action: Avoid committing OAuth client secrets directly in source where possible; consider loading from configuration or environment. If the value was published, rotate it in the Google Cloud console.

Scanner
gitleaks 8.30.1
Rule
generic-api-key
File role
production
Source
src/auth/index.ts:17

Dependency advisory GHSA-fxqj-rqcc-2cmp applies

Minor caution · medium confidence

The local development server used by the developer has a security setting that could be improved, but this server is never part of the extension that end users install.

Technical evidence

Scanner reason: OSV-Scanner matched advisory GHSA-fxqj-rqcc-2cmp to a dependency declared by this repository.

Contextual assessment: This advisory corresponds to an esbuild development server CORS issue. esbuild is a dev dependency used by the vite build toolchain. The vulnerability affects the local dev server, not the bundled production output. End users of the extension are not exposed to the dev server.

Impact: low · Exploitability: unlikely

Developer action: Update esbuild to a patched version in the build toolchain.

Scanner
osv-scanner 2.4.0
Rule
GHSA-fxqj-rqcc-2cmp
File role
production
Source
package-lock.json

Dependency advisory GHSA-3ppc-4f35-3m26 applies

Minor caution · medium confidence

Detailed wording was omitted by the public report safety filter.

Technical evidence

Scanner reason: OSV-Scanner matched advisory GHSA-3ppc-4f35-3m26 to a dependency declared by this repository.

Contextual assessment: This advisory matches a vite development server vulnerability. Vite is declared as a dev dependency and is used only to bundle the extension. The vulnerable dev server functionality is not present in the shipped dist output. No runtime reachability exists for end users.

Impact: low · Exploitability: unlikely

Developer action: Update vite to a patched version in devDependencies.

Scanner
osv-scanner 2.4.0
Rule
GHSA-3ppc-4f35-3m26
File role
production
Source
package-lock.json

Dependency advisory GHSA-mh99-v99m-4gvg applies

Minor caution · medium confidence

A tool used only when building the extension has a security advisory. The final product users install is not affected because the tool is not included in it.

Technical evidence

Scanner reason: OSV-Scanner matched advisory GHSA-mh99-v99m-4gvg to a dependency declared by this repository.

Contextual assessment: This advisory corresponds to a build-toolchain dependency vulnerability. The affected package is part of the vite or esbuild dev toolchain used only during the build process. The production extension bundle does not include or execute this code at runtime.

Impact: low · Exploitability: unlikely

Developer action: Update the affected build dependency to a patched version.

Scanner
osv-scanner 2.4.0
Rule
GHSA-mh99-v99m-4gvg
File role
production
Source
package-lock.json

Dependency advisory GHSA-c2c7-rcm5-vvqj applies

Minor caution · medium confidence

The developer's local testing tool has a security flaw in its preview server. This server is not part of the extension that users actually install and use.

Technical evidence

Scanner reason: OSV-Scanner matched advisory GHSA-c2c7-rcm5-vvqj to a dependency declared by this repository.

Contextual assessment: This advisory matches a vite development server vulnerability such as XSS or arbitrary file access through the dev server. Vite is a dev dependency used only for bundling. The shipped extension output does not run a dev server, so end users are not exposed.

Impact: low · Exploitability: unlikely

Developer action: Update vite to a patched version in devDependencies.

Scanner
osv-scanner 2.4.0
Rule
GHSA-c2c7-rcm5-vvqj
File role
production
Source
package-lock.json

Gitleaks reported generic-api-key

Minor caution · high confidence

The code includes a password-like key for connecting to Google. Because this is a plugin that runs on the user's own device, this key is not truly secret and is expected to be visible to the user. It is a minor weakness because it is hardcoded, but it does not pose a direct security risk to the user.

Technical evidence

Scanner reason: Gitleaks matched secret-detection rule generic-api-key in this repository.

Contextual assessment: The file contains a hardcoded Google OAuth client secret. The surrounding code implements PKCE, indicating this is a public client (e.g., browser extension or desktop app). For public clients, the client secret is not considered truly confidential by Google's OAuth guidelines, as it is embedded in the distributed application. However, hardcoding it is a minor weakness as it could be extracted and used to impersonate the application if the flow were ever changed to a confidential client.

Impact: low · Exploitability: unlikely

Developer action: Consider using a Google OAuth flow that does not require a client secret for public clients, or ensure the client is correctly configured as a public client in Google Cloud Console.

Scanner
gitleaks 8.30.1
Rule
generic-api-key
File role
production
Source
src/auth/index.ts:17

Dependency advisory GHSA-2v37-7h3g-55p8 applies

Minor caution · medium confidence

A packaging tool used during the build step has a known file-handling issue. It is not included in the extension that users load, so it poses no risk to them.

Technical evidence

Scanner reason: OSV-Scanner matched advisory GHSA-2v37-7h3g-55p8 to a dependency declared by this repository.

Contextual assessment: This advisory corresponds to a tar arbitrary file overwrite vulnerability in a transitive build dependency. The package is used during npm install and build, not at runtime in the browser extension. No attacker-controlled input reaches this code for end users of the shipped artifact.

Impact: low · Exploitability: unlikely

Developer action: Update the affected transitive build dependency to a patched version.

Scanner
osv-scanner 2.4.0
Rule
GHSA-2v37-7h3g-55p8
File role
production
Source
package-lock.json

Dependency advisory GHSA-rgw5-rvv9-x895 applies

Minor caution · medium confidence

The build tool's local server has a security advisory, but this server code is never shipped to users. Only the finished bundled extension file is distributed.

Technical evidence

Scanner reason: OSV-Scanner matched advisory GHSA-rgw5-rvv9-x895 to a dependency declared by this repository.

Contextual assessment: This advisory matches a vite development server vulnerability. Vite is declared as a dev dependency and used only to produce the bundled extension output. The vulnerable dev server is not part of the shipped artifact and has no runtime reachability for end users.

Impact: low · Exploitability: unlikely

Developer action: Update vite to a patched version in devDependencies.

Scanner
osv-scanner 2.4.0
Rule
GHSA-rgw5-rvv9-x895
File role
production
Source
package-lock.json

Dependency advisory GHSA-pr6f-5x2q-rwfp applies

Minor caution · low confidence

Detailed wording was omitted by the public report safety filter.

Technical evidence

Scanner reason: OSV-Scanner matched advisory GHSA-pr6f-5x2q-rwfp to a dependency declared by this repository.

Contextual assessment: A medium-severity advisory was matched against a declared dependency in this lockfile. The project's production dependencies are limited to lucide-svelte, open, svelte, and tsx, while the remaining dependencies are dev-only build tools. Without the exact package name from the scanner, the most likely candidates for a medium advisory in this dependency set are build-time tools such as postcss or vite plugins. These dev dependencies do not ship in the built plugin output and have no runtime reachability in the final extension loaded by RisuAI. The advisory severity alone does not establish concrete user harm because the vulnerable code path is not reachable at runtime.

Impact: low · Exploitability: unlikely

Developer action: Update the affected dev dependency to a patched version during the next routine build maintenance.

Scanner
osv-scanner 2.4.0
Rule
GHSA-pr6f-5x2q-rwfp
File role
production
Source
package-lock.json

Dependency advisory GHSA-crpf-4hrx-3jrp applies

Minor caution · low confidence

Another medium-level security issue was found in a package used during development. Like the other medium issue, this is most likely in a build tool that does not end up in the final plugin users install, so the practical risk is low.

Technical evidence

Scanner reason: OSV-Scanner matched advisory GHSA-crpf-4hrx-3jrp to a dependency declared by this repository.

Contextual assessment: A second medium-severity advisory was matched against a declared dependency. As with the other medium advisory, the most likely affected packages in this dependency set are dev-only build tools that are not present in the built plugin artifact. The project builds to a single JavaScript file imported into RisuAI, so dev dependencies have no runtime presence for end users. Without the exact package name and resolved version, concrete runtime harm cannot be established. The advisory severity is medium and the vulnerable code is unlikely to be reachable at runtime in the shipped extension.

Impact: low · Exploitability: unlikely

Developer action: Update the affected dev dependency to a patched version during the next routine build maintenance.

Scanner
osv-scanner 2.4.0
Rule
GHSA-crpf-4hrx-3jrp
File role
production
Source
package-lock.json
Expected scanner matches (4)

Dependency advisory GHSA-23c5-xmqv-rm74 applies

Expected behavior · medium confidence

This security issue affects the development tool used to build the plugin, not the plugin itself. The problem is in a local testing server that is never included in the final plugin file that users install.

Technical evidence

Scanner reason: OSV-Scanner matched advisory GHSA-23c5-xmqv-rm74 to a dependency declared by this repository.

Contextual assessment: This high-severity advisory corresponds to a Vite development server vulnerability. Vite is declared as a devDependency (^5.0.0) used only for building the extension. The vulnerable code is the development server, which is not included in the production build output. The shipped artifact is a bundled JavaScript file imported into RisuAI, not a running dev server, so the vulnerable code path is absent from the distributed extension.

Impact: none · Exploitability: unlikely

Developer action: none

Scanner
osv-scanner 2.4.0
Rule
GHSA-23c5-xmqv-rm74
File role
production
Source
package-lock.json

Dependency advisory GHSA-3jxr-9vmj-r5cp applies

Expected behavior · medium confidence

This security issue affects a build tool's local development server, not the plugin itself. The vulnerable server code is never included in the final plugin file that users install.

Technical evidence

Scanner reason: OSV-Scanner matched advisory GHSA-3jxr-9vmj-r5cp to a dependency declared by this repository.

Contextual assessment: This high-severity advisory corresponds to an esbuild development server vulnerability. esbuild is a transitive build-time dependency (via tsx ^4.20.6 and vite ^5.0.0) used only during the build process. The vulnerable code is the esbuild dev server, which is not part of the production build output. The shipped extension is a bundled JavaScript file with no dev server component, so the vulnerable code is absent from the distributed artifact.

Impact: none · Exploitability: unlikely

Developer action: none

Scanner
osv-scanner 2.4.0
Rule
GHSA-3jxr-9vmj-r5cp
File role
production
Source
package-lock.json

Dependency advisory GHSA-28wg-ghj8-5hjv applies

Expected behavior · medium confidence

This security issue affects the development tool used to build the plugin, not the plugin itself. The problem is in a local testing server that is never included in the final plugin file that users install.

Technical evidence

Scanner reason: OSV-Scanner matched advisory GHSA-28wg-ghj8-5hjv to a dependency declared by this repository.

Contextual assessment: This high-severity advisory corresponds to a Vite development server vulnerability. Vite is declared as a devDependency (^5.0.0) used only for building the extension. The vulnerable code is the development server component, which is not included in the production build output. The shipped artifact is a bundled JavaScript file imported into RisuAI, not a running dev server, so the vulnerable code path is absent from the distributed extension.

Impact: none · Exploitability: unlikely

Developer action: none

Scanner
osv-scanner 2.4.0
Rule
GHSA-28wg-ghj8-5hjv
File role
production
Source
package-lock.json

Credential access and network transmission in one file

Expected behavior · high confidence

The code uses your login token to ask Google who you are, which is a normal part of signing in with Google. The token only goes to Google's own website, not anywhere suspicious.

Technical evidence

Scanner reason: A credential source and an outbound network operation were detected in the same file.

Contextual assessment: The flagged network call sends the OAuth2 access token as a Bearer header to Google's official userinfo endpoint to retrieve the authenticated user's profile. This is a standard OAuth2 user info flow. Tokens are persisted via the plugin framework's local configuration API and are sent only to Google's own API domain, matching the project's stated purpose of integrating Google Antigravity as a provider. No credentials are transmitted to any third-party or unexpected destination.

Impact: none · Exploitability: unlikely

Developer action: none

Scanner
tavernkeeper 3
Rule
credential-exfiltration
File role
production
Source
src/auth/index.ts:287

Related contextual observations

Build-tool dev-server vulnerabilities do not affect shipped artifact

low risk · medium confidence

Three security issues were found in the tools used to build this plugin. These issues only affect local development servers that developers use while working on the code. The servers are not included in the final plugin file that users install, so they do not affect users.

Technical assessment

Three high-severity advisories map to Vite and esbuild development server vulnerabilities. Vite (^5.0.0) is declared as a devDependency, and esbuild is a transitive build-time dependency via tsx (^4.20.6) and Vite. The vulnerable code in each case is the local development server, which is used only during the build process and is not included in the production build output. The shipped extension is a single bundled JavaScript file imported into RisuAI, with no dev server component, so the vulnerable code paths are absent from the distributed artifact.

Impact: none · Exploitability: unlikely

Developer action: none

Sources:

Svelte runtime vulnerabilities bundled into shipped extension

low risk · medium confidence

The UI framework used by this plugin has several known security issues. The framework code is included in the final plugin file, but the plugin only uses it for its own settings and login interface, not to display content from outside sources, so the issues are unlikely to cause harm. Updating the framework would be a good practice.

Technical assessment

Five advisories map to Svelte runtime vulnerabilities. Svelte is declared as a direct production dependency at ^4.2.0 and is bundled into the shipped extension artifact. The vulnerable runtime code is therefore present in the distributed file. However, this extension is a model-provider plugin for RisuAI that handles authentication, token management, and model selection. It does not appear to render attacker-controlled URLs or untrusted external content through Svelte templates, so the vulnerable code paths are unlikely to be reached. Updating Svelte to a patched version would eliminate the vulnerable code from the artifact.

Impact: low · Exploitability: unlikely

Developer action: Update svelte to the latest patched 4.x release to remove the vulnerable runtime code from the bundled output.

Sources:

OAuth client ID and secret pair used for stated Google login

low risk · high confidence

The login details here are used for the plugin's intended Google sign-in feature, not for anything hidden or unexpected.

Technical assessment

The client ID on the adjacent line and the client secret form a standard Google OAuth installed-app credential pair used to authenticate users into the Antigravity provider, matching the project's stated purpose. No exfiltration or alternate destination is visible in the supplied context.

Impact: none · Exploitability: unlikely

Developer action: none

Sources:

Coverage and limitations

Tools

Limitations

Technical scan identity