TavernKeeper Scan Report

mattjaybe/SillyTavern-Pathweaver

Commit f8eaded Reviewed

No material or immediate-danger concern was identified in this review.

This advisory report describes what the named tools and review process found at one exact commit. Unknown or unobserved behavior may still exist.

0 immediate danger 0 material 3 low

What this review found

No material or immediate-danger item was identified.

Minor cautions

JavaScript analysis reported javascript.xray.unsafe-regex

Minor caution · medium confidence

A crafted input might briefly slow or freeze the local client, without showing broader security harm.

Technical evidence

Scanner reason: JavaScript analysis matched static JavaScript security signal javascript.xray.unsafe-regex. The match applies to this repository.

Contextual assessment: The expression may permit a local CPU slowdown, but this evidence shows no credential, persistence, code-execution, or cross-user impact.

Impact: low · Exploitability: plausible

Developer action: Bound the input length or replace the expression when practical.

Scanner
javascript-analysis webcrack-2.16.0_js-x-ray-16.0.0_signatures-1_literals-1_families-1
Rule
javascript.xray.unsafe-regex
File role
production
Source
index.js:863
Contextual expected matches (2)

JavaScript analysis reported javascript.download-to-execution

Expected behavior · high confidence

The extension sends requests to AI model services to get story suggestions, which is exactly what it's supposed to do. The scanner flagged the combination of network calls and response processing, but there's no evidence of downloading and running code.

Technical evidence

Scanner reason: JavaScript analysis matched static JavaScript security signal javascript.download-to-execution. The match applies to this repository.

Contextual assessment: The scanner correlates network retrieval primitives (fetch calls) with code execution sinks in the same file. Examining the actual code, the fetch calls target user-configured local AI model endpoints (Ollama at localhost:11434, OpenAI-compatible at localhost:1234/v1, etc.) for generation requests. The 'execution sink' correlation is likely triggered by JSON.parse calls used to process streaming SSE responses from these model APIs. There is no eval, Function constructor, or other dynamic code execution from network data. All network destinations are user-configured URLs that default to localhost. This matches the extension's stated purpose of generating AI-powered story suggestions via multiple backends.

Impact: none · Exploitability: unlikely

Developer action: No change required. If desired, consider validating user-supplied URLs against expected protocols to prevent SSRF-like misuse, though this is a minor hardening step.

Scanner
javascript-analysis webcrack-2.16.0_js-x-ray-16.0.0_signatures-1_literals-1_families-1
Rule
javascript.download-to-execution
File role
production
Source
index.js:4-331

JavaScript analysis reported javascript.xray.shady-link

Expected behavior · high confidence

The scanner flagged repeated link-like patterns, but these are just standard localhost addresses for local AI tools and font names used in the extension's settings. Nothing suspicious is present.

Technical evidence

Scanner reason: JavaScript analysis matched static JavaScript security signal javascript.xray.shady-link. The match applies to this repository.

Contextual assessment: Detailed technical wording was omitted by the public report safety filter.

Impact: none · Exploitability: unlikely

Developer action: none

Scanner
javascript-analysis webcrack-2.16.0_js-x-ray-16.0.0_signatures-1_literals-1_families-1
Rule
javascript.xray.shady-link
File role
production
Source
index.js:104

Coverage and limitations

JavaScript coverage

Tools

Limitations

Technical scan identity