TavernKeeper Scan Report

chaaruze/SillyTavern-Too-Many-Chats

Commit 1ed8ac8 Reviewed

No material or immediate-danger concern was identified in this review.

This advisory report describes what the named tools and review process found at one exact commit. Unknown or unobserved behavior may still exist.

0 immediate danger 0 material 1 low

What this review found

No material or immediate-danger item was identified.

Contextual expected matches (1)

JavaScript analysis reported javascript.xray.obfuscated-code

Expected behavior · high confidence

The code is plainly readable with comments and clear function names. There is no hidden or disguised behavior; it simply organizes chat lists into folders in the SillyTavern interface.

Technical evidence

Scanner reason: JavaScript analysis matched static JavaScript security signal javascript.xray.obfuscated-code. The match applies to this repository.

Contextual assessment: The JS-X-Ray scanner flagged an obfuscated-code signal with low confidence on line 1, but the supplied source is fully readable, well-commented JavaScript. It is a standard IIFE-based SillyTavern extension that reads context via SillyTavern.getContext(), manipulates DOM elements to organize chats into folders, and persists settings through saveSettingsDebounced(). There are no encoded strings, eval calls, dynamic code injection, packed payloads, or any other obfuscation techniques present. The code uses clear variable names, inline comments, and straightforward logic for folder creation, chat sorting, and lazy-loading UI rendering. No external network calls, credential access, or concealed execution paths are visible in the provided source.

Impact: none · Exploitability: unlikely

Developer action: none

Scanner
javascript-analysis webcrack-2.16.0_js-x-ray-16.0.0_signatures-1_literals-1_families-1
Rule
javascript.xray.obfuscated-code
File role
production
Source
index.js:1

Coverage and limitations

JavaScript coverage

Tools

Limitations

Technical scan identity