A scanning tool flagged this file as possibly hiding its code, but the actual code shown is open and easy to read. It is a normal SillyTavern extension that stores settings, edits chat prompts, and processes image-generation tags. Nothing in the supplied code is disguised or secret.
Technical evidence
Scanner reason: JavaScript analysis matched static JavaScript security signal javascript.xray.obfuscated-code. The match applies to this repository.
Contextual assessment: The scanner raised an obfuscation signal, but the supplied source representation is plainly readable, well-commented JavaScript at transform depth 0 (raw). It contains ordinary SillyTavern extension patterns: imports of host APIs for settings, events, and prompt injection; a large readable default-settings object; helper functions for character-key migration, preset storage, and UI rendering; and complex but legible regular expressions for extracting pic prompt tags. There are no packed or encoded strings, no eval-style decoding, no concealed network calls, and no hidden execution paths in the supplied evidence. The scanner signal most likely stems from the dense regex literals or template-string usage, which are false positives here, and the scanner itself reports low confidence.