TavernKeeper Scan Report

jschm42/taleweaver

Commit d88ed33 Reviewed Sep 23, 2026

No material or immediate-danger concern was identified in this review.

This advisory report describes what the named tools and review process found at one exact commit. Unknown or unobserved behavior may still exist.

0 immediate danger 0 material 23 low

What this review found

No material or immediate-danger item was identified.

Deterministic technical evidence (10)

zizmor reported unpinned-uses · zizmor 1.28.0

The code has a known weakness, though this scan does not show that anyone can exploit it here.

Policy reason: zizmor-known-workflow-rule · Execution scope: automation

Source: .github/workflows/ci.yml:24
Dependency advisory GHSA-w5vr-8v7q-w6rv:pkg:f1e0369511ba88788b821e5e applies · osv-scanner 2.4.0

A dependency has a published security issue, though this scan does not show that the project exposes it to an attacker.

Policy reason: osv-structured-advisory · Execution scope: unknown

Source: frontend/package-lock.json
Dependency advisory GHSA-rgw5-rvv9-x895:pkg:e2d26d120652434b1043ffdf applies · osv-scanner 2.4.0

A dependency has a published security issue, though this scan does not show that the project exposes it to an attacker.

Policy reason: osv-structured-advisory · Execution scope: unknown

Source: frontend/package-lock.json
zizmor reported unpinned-uses · zizmor 1.28.0

The code has a known weakness, though this scan does not show that anyone can exploit it here.

Policy reason: zizmor-known-workflow-rule · Execution scope: automation

Source: .github/workflows/ci.yml:21
Dependency advisory GHSA-2883-xcg3-v3hh:pkg:d0255a07b416d6426cad8ae8 applies · osv-scanner 2.4.0

A dependency has a published security issue, though this scan does not show that the project exposes it to an attacker.

Policy reason: osv-structured-advisory · Execution scope: unknown

Source: frontend/package-lock.json
Dependency advisory GHSA-73wf-gq98-2v4g:pkg:978489779fc1a775f3f91fab applies · osv-scanner 2.4.0

A dependency has a published security issue, though this scan does not show that the project exposes it to an attacker.

Policy reason: osv-structured-advisory · Execution scope: unknown

Source: frontend/package-lock.json
Dependency advisory GHSA-rgw5-rvv9-x895:pkg:b8b4e108ab4269d091ad76f5 applies · osv-scanner 2.4.0

A dependency has a published security issue, though this scan does not show that the project exposes it to an attacker.

Policy reason: osv-structured-advisory · Execution scope: unknown

Source: frontend/package-lock.json
Dependency advisory GHSA-w9m9-85wc-3x92:pkg:789fe9d4eb26f7c51d684509 applies · osv-scanner 2.4.0

A dependency has a published security issue, though this scan does not show that the project exposes it to an attacker.

Policy reason: osv-structured-advisory · Execution scope: unknown

Source: frontend/package-lock.json
zizmor reported artipacked · zizmor 1.28.0

The code has a known weakness, though this scan does not show that anyone can exploit it here.

Policy reason: zizmor-known-workflow-rule · Execution scope: automation

Source: .github/workflows/ci.yml:20-21
Dependency advisory GHSA-c83g-rgw3-j3cx:pkg:55c4a668cc988d5ceedbfbf6 applies · osv-scanner 2.4.0

A dependency has a published security issue, though this scan does not show that the project exposes it to an attacker.

Policy reason: osv-structured-advisory · Execution scope: unknown

Source: frontend/package-lock.json

Contextual expected matches (9)

Credential access and network transmission in one file

Expected behavior · high confidence

This app logs you in and keeps a session token, and whenever it loads or posts game chat it includes that token so the server knows the request is yours. The alarm was raised only because reading the token and making a web request happen in the same file. The requests go solely to the app's own server, which is exactly where a login token is supposed to go. Nothing is sent to anyone else, and no malicious behavior is present.

Technical evidence

Scanner reason: A credential source and an outbound network operation were detected in the same file.

Contextual assessment: The scanner flagged co-location of a credential read and a network call, but the actual data flow is the standard authenticated-client pattern. A helper reads the session token from the app's auth store and attaches it as a bearer authorization header on requests to adventure chat endpoints under a relative same-origin API base. All observed requests target the application's own backend, matching the project's stated purpose of a browser RPG client talking to its own server. There is no third-party destination, alternate host, encoded or obfuscated payload, dynamic URL construction from external input, or transmission of the token anywhere other than the issuer backend. Sending a bearer token to the API that issued it is the token's intended use, not exfiltration.

Impact: none · Exploitability: unlikely

Developer action: none

Scanner: tavernkeeper 5
Rule: credential-exfiltration
File role: production
Source: frontend/src/composables/useGameSocket.ts:200

OpenGrep reported tavernkeeper.persistence.startup-modification

Expected behavior · high confidence

The scanner flagged a CSS style rule as persistence behavior, but it is just visual styling for the profile page layout. No security issue.

Technical evidence

Scanner reason: OpenGrep matched static-analysis rule tavernkeeper.persistence.startup-modification. The match applies to this repository.

Contextual assessment: Line 492 is a CSS class selector (.profile-sidebar) inside a scoped style block. It sets padding, background, border, and flexbox layout properties. There is no JavaScript execution, no persistence mechanism, no startup modification, and no data flow. The scanner's persistence.startup-modification rule is a false positive on CSS declarations.

Impact: none · Exploitability: unlikely

Developer action: none

Scanner: opengrep 1.26.0
Rule: tavernkeeper.persistence.startup-modification
File role: production
Source: frontend/src/components/portal/UserProfileContent.vue:492

OpenGrep reported tavernkeeper.persistence.startup-modification

Expected behavior · high confidence

The flagged line is a CSS styling rule for the profile container. It has nothing to do with persistence or security.

Technical evidence

Scanner reason: OpenGrep matched static-analysis rule tavernkeeper.persistence.startup-modification. The match applies to this repository.

Contextual assessment: Line 450 is a CSS class selector (.profile-container) in a scoped style block defining padding, height, overflow, and width. No executable code, no persistence, no startup behavior. False positive from the scanner on CSS.

Impact: none · Exploitability: unlikely

Developer action: none

Scanner: opengrep 1.26.0
Rule: tavernkeeper.persistence.startup-modification
File role: production
Source: frontend/src/components/portal/UserProfileContent.vue:450

malcontent reported exec-shell-background_launcher

Expected behavior · high confidence

This is a normal setup script that, after asking the user for confirmation, starts the project's own backend and frontend in the background. The relative paths point to the project's own virtual environment and frontend folder, which is standard for a local development setup.

Technical evidence

Scanner reason: malcontent matched behavioral-analysis rule exec-shell-background_launcher. The match applies to this repository.

Contextual assessment: The file script creates a Python virtual environment under ./venv, installs dependencies, generates local encryption and secret keys, runs database migrations, installs frontend npm dependencies, and optionally launches the project's own backend (./venv/bin/python3 -m backend.main) and frontend (npm run dev) as background processes. The scanner flagged background process launches from relative paths, but these paths reference the project's own venv directory and frontend folder created earlier in the same script. The launch is gated behind an interactive user prompt (read -p) and a --skip-start flag. There is no attacker-controlled input, no external destination, no obfuscation, and no credential exfiltration. This is standard development setup behavior proportionate to the stated project purpose.

Impact: none · Exploitability: unlikely

Developer action: none

Scanner: malcontent 1.25.7
Rule: exec-shell-background_launcher
File role: production
Source: setup.sh

OpenGrep reported tavernkeeper.download-and-execute.shell-pipeline

Expected behavior · high confidence

The flagged line is a documentation example that pipes a local API response through a JSON formatter. It does not download or execute anything from the internet.

Technical evidence

Scanner reason: OpenGrep matched static-analysis rule tavernkeeper.download-and-execute.shell-pipeline. The match applies to this repository.

Contextual assessment: Line 155 contains a curl command targeting localhost (127.0.0.1:7860) piped to python -m json.tool, which only pretty-prints JSON. This is documentation showing users how to verify their local Stable Diffusion daemon. No remote download-and-execute occurs; the pipe is to a standard JSON formatter, not arbitrary code execution. The file role is documentation with no runtime behavior.

Impact: none · Exploitability: unlikely

Developer action: none

Scanner: opengrep 1.26.0
Rule: tavernkeeper.download-and-execute.shell-pipeline
File role: documentation
Source: docs/HOWTO_LOCAL_STABLE_DIFFUSION.md:155

OpenGrep reported tavernkeeper.persistence.startup-modification

Expected behavior · high confidence

The flagged line is a CSS grid layout rule for the profile dashboard. It is purely visual styling with no security relevance.

Technical evidence

Scanner reason: OpenGrep matched static-analysis rule tavernkeeper.persistence.startup-modification. The match applies to this repository.

Contextual assessment: Line 470 is a CSS class selector (.profile-dashboard) in a scoped style block defining a CSS grid layout. No JavaScript, no persistence mechanism, no startup modification. Scanner false positive on CSS.

Impact: none · Exploitability: unlikely

Developer action: none

Scanner: opengrep 1.26.0
Rule: tavernkeeper.persistence.startup-modification
File role: production
Source: frontend/src/components/portal/UserProfileContent.vue:470

JavaScript analysis reported javascript.xray.serialize-environment

Expected behavior · high confidence

The flagged code reads a standard environment variable to decide linting strictness. It is a normal build-time configuration pattern with no security impact.

Technical evidence

Scanner reason: JavaScript analysis matched static JavaScript security signal javascript.xray.serialize-environment. The match applies to this repository.

Contextual assessment: Line 17 reads process.env.NODE_ENV in an ESLint configuration file to conditionally set the no-console rule severity. This is a standard Vue/TypeScript project linting pattern executed at build time, not runtime. The environment variable access is limited to NODE_ENV, a non-sensitive build flag. No credentials, secrets, or sensitive environment data are serialized or transmitted. The scanner's serialize-environment signal is a false positive on this idiomatic config pattern.

Impact: none · Exploitability: unlikely

Developer action: none

Scanner: javascript-analysis webcrack-2.16.0_js-x-ray-16.0.0_signatures-1_literals-1_families-1
Rule: javascript.xray.serialize-environment
File role: production
Source: frontend/.eslintrc.cjs:17

OpenGrep reported tavernkeeper.persistence.startup-modification

Expected behavior · high confidence

The flagged line is a CSS styling rule for the profile card appearance. It is purely cosmetic with no security impact.

Technical evidence

Scanner reason: OpenGrep matched static-analysis rule tavernkeeper.persistence.startup-modification. The match applies to this repository.

Contextual assessment: Line 457 is a CSS class selector (.profile-card) in a scoped style block defining width, max-width, margin, background gradient, border, border-radius, and box-shadow. No executable code, no persistence, no startup behavior. Scanner false positive on CSS declarations.

Impact: none · Exploitability: unlikely

Developer action: none

Scanner: opengrep 1.26.0
Rule: tavernkeeper.persistence.startup-modification
File role: production
Source: frontend/src/components/portal/UserProfileContent.vue:457

OpenGrep reported tavernkeeper.persistence.startup-modification

Expected behavior · high confidence

The flagged line is a CSS layout rule for the main content panel. It is purely visual styling with no security relevance.

Technical evidence

Scanner reason: OpenGrep matched static-analysis rule tavernkeeper.persistence.startup-modification. The match applies to this repository.

Contextual assessment: Line 662 is a CSS class selector (.profile-main) inside a scoped style block in a Vue single-file component. It defines padding, display flex, flex-direction, and gap properties. No JavaScript, no persistence mechanism, no startup modification, and no data flow. The scanner's persistence.startup-modification rule is a false positive on CSS declarations.

Impact: none · Exploitability: unlikely

Developer action: none

Scanner: opengrep 1.26.0
Rule: tavernkeeper.persistence.startup-modification
File role: production
Source: frontend/src/components/portal/UserProfileContent.vue:662

Related contextual observations

Local curl piped to json.tool in documentation

low risk · high confidence

The command simply formats JSON output from a local service for readability.

Technical assessment

The curl-to-python pipe at line 155 sends a GET request to the local loopback SD WebUI API and pipes the response through python -m json.tool for pretty-printing. No remote content is downloaded or executed; python -m json.tool is a read-only JSON formatter. This is standard documentation for verifying a local daemon.

Impact: none · Exploitability: unlikely

Developer action: none

Sources:

docs/HOWTO_LOCAL_STABLE_DIFFUSION.md:155

Standard NODE_ENV check in ESLint config

low risk · high confidence

Reading NODE_ENV in an ESLint config is a common practice for adjusting lint rules between development and production builds.

Technical assessment

The process.env.NODE_ENV reference at line 17 is a standard ESLint configuration idiom that toggles console and debugger warnings based on build mode. It accesses only NODE_ENV, a non-sensitive variable, and runs during linting, not in the shipped application runtime.

Impact: none · Exploitability: unlikely

Developer action: none

Sources:

frontend/.eslintrc.cjs:17

CSS selectors falsely flagged as persistence mechanisms

low risk · high confidence

Multiple CSS style rules were incorrectly flagged as persistence mechanisms. They are just visual layout and styling definitions with no executable behavior.

Technical assessment

All four candidates (lines 450, 457, 470, 492) are CSS class selectors in a scoped style block within a Vue single-file component. They define layout and visual properties (padding, grid, borders, shadows). No JavaScript execution, persistence mechanisms, or startup modification is present. The scanner's persistence.startup-modification rule matched on CSS property names, producing false positives.

Impact: none · Exploitability: unlikely

Developer action: none

Sources:

CSS selector falsely flagged as persistence mechanism

low risk · high confidence

The flagged CSS rule styles the main content area of the user profile page. No executable code or persistence behavior is present.

Technical assessment

The .profile-main CSS selector at line 662 sets padding, display, flex-direction, and gap in a scoped style block. No executable code, persistence, or startup behavior is involved. Scanner false positive on CSS.

Impact: none · Exploitability: unlikely

Developer action: none

Sources:

frontend/src/components/portal/UserProfileContent.vue:662

Coverage and limitations

Inventory: 560 files · 70672728 bytes
Contextual coverage: 19 of 19 candidates assessed

JavaScript coverage

Status: Incomplete
Candidates: 44 files · 303946 bytes
X-Ray review families: 2 warning occurrences compacted to 1 evidence-preserving review families
Representations: 44 raw · 0 decoded · 0 normalized · 0 bundle modules
Stage scans: 44 raw signatures · 7 raw AST · 44 raw OpenGrep · 0 derived signatures · 0 derived AST · 0 derived OpenGrep

Unresolved JavaScript stages

frontend/src/composables/useApi.ts — raw-ast / parse
frontend/src/composables/useComicTurns.ts — raw-ast / parse
frontend/src/composables/useGameAutoSpeak.ts — raw-ast / parse
frontend/src/composables/useGameCommandFlow.ts — raw-ast / parse
frontend/src/composables/useGameInteractionState.ts — raw-ast / parse
frontend/src/composables/useGameProgressState.ts — raw-ast / parse
frontend/src/composables/useGameSessionLifecycle.ts — raw-ast / parse
frontend/src/composables/useGameSocket.ts — raw-ast / parse
frontend/src/composables/useGameUiFeedback.ts — raw-ast / parse
frontend/src/composables/useNotifications.ts — raw-ast / parse
frontend/src/composables/usePortalData.ts — raw-ast / parse
frontend/src/composables/usePortalModals.ts — raw-ast / parse
frontend/src/composables/usePortalPendingState.ts — raw-ast / parse
frontend/src/composables/usePortalSectionRouting.ts — raw-ast / parse
frontend/src/composables/useVoiceInput.ts — raw-ast / parse
frontend/src/constants/createAdventureHelpTexts.ts — raw-ast / parse
frontend/src/env.d.ts — raw-ast / parse
frontend/src/services/adventureService.ts — raw-ast / parse
frontend/src/services/audioService.ts — raw-ast / parse
frontend/src/services/catalogService.ts — raw-ast / parse
frontend/src/services/entityService.ts — raw-ast / parse
frontend/src/services/gameActionService.ts — raw-ast / parse
frontend/src/services/gameCommandService.ts — raw-ast / parse
frontend/src/services/gameViewService.ts — raw-ast / parse
frontend/src/services/hoverEntityService.ts — raw-ast / parse
frontend/src/services/http.ts — raw-ast / parse
frontend/src/services/notificationService.ts — raw-ast / parse
frontend/src/services/settingsService.ts — raw-ast / parse
frontend/src/services/testService.ts — raw-ast / parse
frontend/src/services/userService.ts — raw-ast / parse
frontend/src/services/visualService.ts — raw-ast / parse
frontend/src/store/auth.ts — raw-ast / parse
frontend/src/store/config.ts — raw-ast / parse
frontend/src/types/index.ts — raw-ast / parse
frontend/src/utils/commands.ts — raw-ast / parse
frontend/src/utils/editor_utils.ts — raw-ast / parse
frontend/src/utils/game_icons.ts — raw-ast / parse

Tools

inventory 0.1.0 — completed
tavernkeeper-static 5 — completed
gitleaks 8.30.1 — completed
opengrep 1.26.0 — completed
javascript-analysis webcrack-2.16.0_js-x-ray-16.0.0_signatures-1_literals-1_families-1 — completed
osv-scanner 2.4.0 — completed
zizmor 1.28.0 — completed
malcontent 1.25.7 — completed

Limitations

This advisory review cannot prove the absence of unknown behavior.
JavaScript analysis was incomplete, so this first-filter scan supports no clean conclusion about unobserved behavior.

Technical scan identity

Full commit: d88ed33e14a4245874835d32826e56b0d46cbf85
Completed: Sep 23, 2026
History depth: 4 commits
Method: Deterministic evidence with contextual review
Reviewer: nano-gpt.com · zai-org/glm-latest
Scanner: 0.1.0
Scanner policy: 5
Rule catalog: 2
Contextual policy: 5
Ecosystem context: sillytavern-community-v1
Prompt: contextual-review-v7
Assessment schema: contextual-assessment-v2
Review provenance: 1 fresh / 5 reused groups · 1 fresh / 8 reused candidates
Review source reports: 40d7097cd8ed2bdb9aa81d2429e889528f4a33a41904b85a229ed6bf47899152
Evidence triage: 10 deterministic / 9 contextual candidates · 6 contextual / 8 total behavior cases
Model budget: 1 model call · 1 / 12 fresh cases · 21505 / 200000 estimated input · 16053 / 250000 actual input · 1289 / 40000 output tokens
Review batching: 1 model call · up to 1 groups and 1 candidates per call · 0 retry calls · 0 over-budget singleton calls
Review usage: 16053 input · 1289 output · 0 cache read · 839 reasoning tokens
Report: e20be6867841a6de393be88cbc5677273f23be15e215412d2976f2db237d8331