An automated scanner flagged the file as possibly obfuscated, but the actual code shown is ordinary, human-readable extension code with comments and clear function names. The complex-looking parts are text-matching patterns the extension uses to find image prompt tags, which is exactly what the extension is supposed to do. Nothing hidden or disguised was found.
Technical evidence
Scanner reason: JavaScript analysis matched static JavaScript security signal javascript.xray.obfuscated-code. The match applies to this repository.
Contextual assessment: The obfuscation signal is a low-confidence static heuristic match reported at line 1 with no retained literal values. The supplied source for that region is plainly readable JavaScript with descriptive comments, standard SillyTavern extension imports, named constants, and clearly identified helper functions. There are no encoded payloads, hex or base64 strings, packed expressions, concealed evaluation, or hidden execution paths. Any heuristic interest is plausibly attributable to dense regex literals and escaped pattern strings used for the extension's stated purpose of detecting image-generation prompt tags, which is normal for a tag-parsing extension. No behavior is demonstrated beyond the project's described functionality of parsing chat responses, mutating image prompts, and persisting its own settings through the host's settings API.