The scanner noticed both network calls and code-rendering features in the same file, which can look suspicious. Here, the network calls go to the LLM generation API and the rendering displays results in the extension UI — both are exactly what a lorebook-creator extension is supposed to do.
Technical evidence
Scanner reason: JavaScript analysis matched static JavaScript security signal javascript.download-to-execution. The match applies to this repository.
Contextual assessment: The download-to-execution correlation spans lines 82-778, a broad range covering the genQuiet wrapper and UI constants. The 'network retrieval' is the SillyTavern quiet-generation API call (genQuiet), and the 'execution sink' is standard DOM manipulation for rendering generated lorebook content. No eval(), Function constructor, or string-based dynamic execution is present. The setTimeout in lbcGenQuiet uses a function callback, not a string. The esc() function is a safe DOM-based HTML escaper. This is expected behavior for a SillyTavern extension whose stated purpose is LLM-driven lorebook generation and UI rendering.
The scanner flagged the code as possibly obfuscated, but the actual source is plain, readable JavaScript with clear comments and descriptive variable names. There is no hidden or encoded logic.
Technical evidence
Scanner reason: JavaScript analysis matched static JavaScript security signal javascript.xray.obfuscated-code. The match applies to this repository.
Contextual assessment: The JS-X-Ray obfuscation signal (low scanner confidence) does not correspond to any actual obfuscation in the supplied source. The code is human-readable: descriptive identifiers, extensive comments, standard UI label dictionaries, constants, and prompt templates. No eval, encoded strings, minified payloads, or concealed logic are present. The esc() helper is a standard DOM-based HTML-escaping utility. The lbcGenQuiet wrapper delegates to SillyTavern's quiet generation API with a boolean flag. All behavior matches the stated lorebook-creator extension purpose.