TavernKeeper Scan Report

closuretxt/recast-post-processing

Commit a17c868 Reviewed

No material or immediate-danger concern was identified in this review.

This advisory report describes what the named tools and review process found at one exact commit. Unknown or unobserved behavior may still exist.

0 immediate danger 0 material 1 low

What this review found

No material or immediate-danger item was identified.

Contextual expected matches (1)

JavaScript analysis reported javascript.xray.obfuscated-code

Expected behavior · high confidence

The scanner thought it saw hidden or obfuscated code, but the actual file is just a list of plain, readable text presets for editing AI-generated prose. There is nothing hidden or suspicious here.

Technical evidence

Scanner reason: JavaScript analysis matched static JavaScript security signal javascript.xray.obfuscated-code. The match applies to this repository.

Contextual assessment: The supplied source for file is a straightforward ES module exporting a single array of preset configuration objects. Each object contains named string and boolean properties (name, passes, id, enabled, contextLength, prompt, connection, injectWorldInfo, includeCharCard, includeSceneContext). The prompt fields are multi-line template literals containing plain English instructions for prose-editing passes. There is no eval, no encoded data, no dynamic code generation, no network calls, no string construction from char codes, no minified or packed segments, and no obfuscation of any kind. The scanner's obfuscated-code signal (low confidence) is not corroborated by the actual source. The file's role is static default configuration for a post-processing pipeline extension, consistent with the project's stated purpose.

Impact: none · Exploitability: unlikely

Developer action: none

Scanner
javascript-analysis webcrack-2.16.0_js-x-ray-16.0.0_signatures-1_literals-1_families-1
Rule
javascript.xray.obfuscated-code
File role
production
Source
settings/defaultPresets.js:1

Coverage and limitations

JavaScript coverage

Tools

Limitations

Technical scan identity