The flagged code is not obfuscated — it is clear, commented JavaScript that renders a per-chat library of saved maps in a popup, with buttons to open, edit, and delete entries. The scanner's low-confidence signal is a false positive.
Technical evidence
Scanner reason: JavaScript analysis matched static JavaScript security signal javascript.xray.obfuscated-code. The match applies to this repository.
Contextual assessment: The supplied source for file is plain, human-readable ES module code with descriptive comments, named imports, and standard jQuery-based DOM construction. It uses escapeHtml for user-visible map titles and labels, safeExternalUrl to validate stored URLs before opening them with window.open(..., 'noopener'), and standard SillyTavern APIs (getContext, callGenericPopup, chat metadata persistence). No obfuscation, encoding, eval, or concealed execution is present. All behavior matches the stated project purpose of managing a per-chat map library.
The flagged code is not obfuscated at all — it is plain, well-commented JavaScript that inserts map links into the chat textarea and exports maps as downloaded files or external URLs. The scanner's low-confidence signal is a false positive.
Technical evidence
Scanner reason: JavaScript analysis matched static JavaScript security signal javascript.xray.obfuscated-code. The match applies to this repository.
Contextual assessment: The supplied source for file is fully readable, human-written ES module code with clear comments, named imports, and straightforward function definitions. There is no minification, encoding, eval, or concealment. The file uses safeExternalUrl to validate URLs before opening them in a new tab, safeFileName for download filenames, and standard DOM/clipboard interactions with the SillyTavern chat textarea. All behavior matches the stated project purpose of embedding and exporting map generators.