TavernKeeper Scan Report

lazuli-s/SillyTavern-WorldInfoDrawer

Commit f762089 Reviewed

No material or immediate-danger concern was identified in this review.

This advisory report describes what the named tools and review process found at one exact commit. Unknown or unobserved behavior may still exist.

0 immediate danger 0 material 3 low

What this review found

No material or immediate-danger item was identified.

Contextual expected matches (3)

JavaScript analysis reported javascript.xray.obfuscated-code

Expected behavior · high confidence

The code is straightforward and easy to read. It builds and manages lorebook entry controls in the SillyTavern interface. There is no hidden or scrambled code, no suspicious network activity, and no access to sensitive data. The scanner flag appears to be a mistake.

Technical evidence

Scanner reason: JavaScript analysis matched static JavaScript security signal javascript.xray.obfuscated-code. The match applies to this repository.

Contextual assessment: The supplied source is plain, readable, well-commented JavaScript implementing World Info entry rendering for a SillyTavern extension. It queries host DOM templates, clones template nodes, attaches UI event handlers, and saves entry state through provided context callbacks. No obfuscation, encoded payloads, hidden execution, credential access, or network exfiltration is present. The JS-X-Ray obfuscated-code signal at low scanner confidence is a false positive on this clearly legible code.

Impact: none · Exploitability: unlikely

Developer action: none

Scanner
javascript-analysis webcrack-2.16.0_js-x-ray-16.0.0_signatures-1_literals-1_families-1
Rule
javascript.xray.obfuscated-code
File role
production
Source
src/book-browser/book-list/book-list.world-entry.js:1

JavaScript analysis reported javascript.xray.obfuscated-code

Expected behavior · high confidence

The code is straightforward and defines configuration and saved-preference handling for the Entry Manager feature. It reads user preferences from local storage and sets up default display settings. There is no hidden code, no suspicious activity, and no access to sensitive data. The scanner flag appears to be a mistake.

Technical evidence

Scanner reason: JavaScript analysis matched static JavaScript security signal javascript.xray.obfuscated-code. The match applies to this repository.

Contextual assessment: The supplied source is plain, well-structured JavaScript defining Entry Manager state constants, default column configuration, fallback option lists, localStorage read helpers, and state initialization for a SillyTavern extension. No obfuscation, dynamic code execution, credential access, or network communication is present. The low-confidence JS-X-Ray obfuscated-code signal is a false positive on this clearly legible code.

Impact: none · Exploitability: unlikely

Developer action: none

Scanner
javascript-analysis webcrack-2.16.0_js-x-ray-16.0.0_signatures-1_literals-1_families-1
Rule
javascript.xray.obfuscated-code
File role
production
Source
src/entry-manager/logic/logic.state.js:1

JavaScript analysis reported javascript.xray.obfuscated-code

Expected behavior · high confidence

The code is readable and implements the Entry Manager feature for organizing lorebook entries. It stores user preferences locally and manages the interface. There is no hidden code, no suspicious activity, and no access to sensitive information. The scanner flag appears to be a mistake.

Technical evidence

Scanner reason: JavaScript analysis matched static JavaScript security signal javascript.xray.obfuscated-code. The match applies to this repository.

Contextual assessment: The supplied source is clear, commented JavaScript implementing Entry Manager logic for a SillyTavern lorebook extension. It manages UI state, filters, sorting, scoped book names, and row selection through local DOM manipulation and localStorage for preferences. No obfuscation, dynamic code execution, credential handling, or external network calls are present. The low-confidence JS-X-Ray obfuscated-code signal is a false positive on this legible code.

Impact: none · Exploitability: unlikely

Developer action: none

Scanner
javascript-analysis webcrack-2.16.0_js-x-ray-16.0.0_signatures-1_literals-1_families-1
Rule
javascript.xray.obfuscated-code
File role
production
Source
src/entry-manager/entry-manager.js:1

Coverage and limitations

JavaScript coverage

Unresolved JavaScript stages

Tools

Limitations

Technical scan identity