TavernKeeper Scan Report

lazuli-s/SillyTavern-WorldInfoDrawer

Commit 72af626 Reviewed

No material or immediate-danger concern was identified in this review.

This advisory report describes what the named tools and review process found at one exact commit. Unknown or unobserved behavior may still exist.

0 immediate danger 0 material 3 low

What this review found

No material or immediate-danger item was identified.

Contextual expected matches (3)

JavaScript analysis reported javascript.xray.obfuscated-code

Expected behavior · high confidence

The code is straightforward and easy to read. It builds and manages lorebook entry controls in the SillyTavern interface. There is no hidden or scrambled code, no suspicious network activity, and no access to sensitive data. The scanner flag appears to be a mistake.

Technical evidence

Scanner reason: JavaScript analysis matched static JavaScript security signal javascript.xray.obfuscated-code. The match applies to this repository.

Contextual assessment: The supplied source is plain, readable, well-commented JavaScript implementing World Info entry rendering for a SillyTavern extension. It queries host DOM templates, clones template nodes, attaches UI event handlers, and saves entry state through provided context callbacks. No obfuscation, encoded payloads, hidden execution, credential access, or network exfiltration is present. The JS-X-Ray obfuscated-code signal at low scanner confidence is a false positive on this clearly legible code.

Impact: none · Exploitability: unlikely

Developer action: none

Scanner
javascript-analysis webcrack-2.16.0_js-x-ray-16.0.0_signatures-1_literals-1_families-1
Rule
javascript.xray.obfuscated-code
File role
production
Source
src/book-browser/book-list/book-list.world-entry.js:1

JavaScript analysis reported javascript.xray.obfuscated-code

Expected behavior · high confidence

The code is straightforward and defines configuration and saved-preference handling for the Entry Manager feature. It reads user preferences from local storage and sets up default display settings. There is no hidden code, no suspicious activity, and no access to sensitive data. The scanner flag appears to be a mistake.

Technical evidence

Scanner reason: JavaScript analysis matched static JavaScript security signal javascript.xray.obfuscated-code. The match applies to this repository.

Contextual assessment: The supplied source is plain, well-structured JavaScript defining Entry Manager state constants, default column configuration, fallback option lists, localStorage read helpers, and state initialization for a SillyTavern extension. No obfuscation, dynamic code execution, credential access, or network communication is present. The low-confidence JS-X-Ray obfuscated-code signal is a false positive on this clearly legible code.

Impact: none · Exploitability: unlikely

Developer action: none

Scanner
javascript-analysis webcrack-2.16.0_js-x-ray-16.0.0_signatures-1_literals-1_families-1
Rule
javascript.xray.obfuscated-code
File role
production
Source
src/entry-manager/logic/logic.state.js:1

JavaScript analysis reported javascript.xray.obfuscated-code

Expected behavior · high confidence

The scanner thought it saw hidden or scrambled code, but the actual code is open and easy to read. It is a normal part of the extension that helps users manage and sort lorebook entries. Nothing suspicious was found.

Technical evidence

Scanner reason: JavaScript analysis matched static JavaScript security signal javascript.xray.obfuscated-code. The match applies to this repository.

Contextual assessment: Detailed technical wording was omitted by the public report safety filter.

Impact: none · Exploitability: unlikely

Developer action: none

Scanner
javascript-analysis webcrack-2.16.0_js-x-ray-16.0.0_signatures-1_literals-1_families-1
Rule
javascript.xray.obfuscated-code
File role
production
Source
src/entry-manager/entry-manager.js:1

Coverage and limitations

JavaScript coverage

Unresolved JavaScript stages

Tools

Limitations

Technical scan identity