TavernKeeper Advisory reports for Tavernary

TavernKeeper Scan Report

jeremyoha450/SillyTavern-Character-Continuity-Manager

Commit 5513923 Reviewed

No material or immediate-danger concern was identified in this review.

This advisory report describes what the named tools and review process found at one exact commit. Unknown or unobserved behavior may still exist.

0 immediate danger 0 material 18 low

What this review found

No material or immediate-danger item was identified.

Minor cautions

JavaScript analysis reported javascript.xray.unsafe-regex

Minor caution · medium confidence

A crafted input might briefly slow or freeze the local client, without showing broader security harm.

Technical evidence

Scanner reason: JavaScript analysis matched static JavaScript security signal javascript.xray.unsafe-regex. The match applies to this repository.

Contextual assessment: The expression may permit a local CPU slowdown, but this evidence shows no credential, persistence, code-execution, or cross-user impact.

Impact: low · Exploitability: plausible

Developer action: Bound the input length or replace the expression when practical.

Scanner
javascript-analysis webcrack-2.16.0_js-x-ray-16.0.0_signatures-1_literals-1_families-1
Rule
javascript.xray.unsafe-regex
File role
tooling
Source
scripts/tasks/image/nudity.js:69

JavaScript analysis reported javascript.xray.unsafe-regex

Minor caution · medium confidence

A crafted input might briefly slow or freeze the local client, without showing broader security harm.

Technical evidence

Scanner reason: JavaScript analysis matched static JavaScript security signal javascript.xray.unsafe-regex. The match applies to this repository.

Contextual assessment: The expression may permit a local CPU slowdown, but this evidence shows no credential, persistence, code-execution, or cross-user impact.

Impact: low · Exploitability: plausible

Developer action: Bound the input length or replace the expression when practical.

Scanner
javascript-analysis webcrack-2.16.0_js-x-ray-16.0.0_signatures-1_literals-1_families-1
Rule
javascript.xray.unsafe-regex
File role
tooling
Source
scripts/tasks/facts/parser.js:50

JavaScript analysis reported javascript.xray.unsafe-regex

Minor caution · medium confidence

A crafted input might briefly slow or freeze the local client, without showing broader security harm.

Technical evidence

Scanner reason: JavaScript analysis matched static JavaScript security signal javascript.xray.unsafe-regex. The match applies to this repository.

Contextual assessment: The expression may permit a local CPU slowdown, but this evidence shows no credential, persistence, code-execution, or cross-user impact.

Impact: low · Exploitability: plausible

Developer action: Bound the input length or replace the expression when practical.

Scanner
javascript-analysis webcrack-2.16.0_js-x-ray-16.0.0_signatures-1_literals-1_families-1
Rule
javascript.xray.unsafe-regex
File role
tooling
Source
scripts/extraction/post-process.js:687

JavaScript analysis reported javascript.xray.unsafe-regex

Minor caution · medium confidence

A crafted input might briefly slow or freeze the local client, without showing broader security harm.

Technical evidence

Scanner reason: JavaScript analysis matched static JavaScript security signal javascript.xray.unsafe-regex. The match applies to this repository.

Contextual assessment: The expression may permit a local CPU slowdown, but this evidence shows no credential, persistence, code-execution, or cross-user impact.

Impact: low · Exploitability: plausible

Developer action: Bound the input length or replace the expression when practical.

Scanner
javascript-analysis webcrack-2.16.0_js-x-ray-16.0.0_signatures-1_literals-1_families-1
Rule
javascript.xray.unsafe-regex
File role
tooling
Source
scripts/character-creator-tools.js:343

JavaScript analysis reported javascript.xray.unsafe-regex

Minor caution · medium confidence

A crafted input might briefly slow or freeze the local client, without showing broader security harm.

Technical evidence

Scanner reason: JavaScript analysis matched static JavaScript security signal javascript.xray.unsafe-regex. The match applies to this repository.

Contextual assessment: The expression may permit a local CPU slowdown, but this evidence shows no credential, persistence, code-execution, or cross-user impact.

Impact: low · Exploitability: plausible

Developer action: Bound the input length or replace the expression when practical.

Scanner
javascript-analysis webcrack-2.16.0_js-x-ray-16.0.0_signatures-1_literals-1_families-1
Rule
javascript.xray.unsafe-regex
File role
tooling
Source
scripts/tasks/image/parser.js:42
Deterministic technical evidence (9)

  • JavaScript analysis reported javascript.xray.serialize-environment · javascript-analysis webcrack-2.16.0_js-x-ray-16.0.0_signatures-1_literals-1_families-1

    This technical signal is not part of the shipped runtime behavior.

    Policy reason: javascript-xray-inert-content · Execution scope: test-documentation-data

    Source: tests/browser/playwright.config.mjs:9

  • zizmor reported artipacked · zizmor 1.28.0

    The code has a known weakness, though this scan does not show that anyone can exploit it here.

    Policy reason: zizmor-known-workflow-rule · Execution scope: automation

    Source: .github/workflows/ci.yml:11

  • zizmor reported unpinned-uses · zizmor 1.28.0

    The code has a known weakness, though this scan does not show that anyone can exploit it here.

    Policy reason: zizmor-known-workflow-rule · Execution scope: automation

    Source: .github/workflows/ci.yml:11

  • JavaScript analysis reported javascript.xray.shady-link · javascript-analysis webcrack-2.16.0_js-x-ray-16.0.0_signatures-1_literals-1_families-1

    This technical signal is not part of the shipped runtime behavior.

    Policy reason: javascript-xray-inert-content · Execution scope: test-documentation-data

    Source: tests/browser/playwright.config.mjs:9

  • JavaScript analysis reported javascript.xray.serialize-environment · javascript-analysis webcrack-2.16.0_js-x-ray-16.0.0_signatures-1_literals-1_families-1

    This technical signal is not part of the shipped runtime behavior.

    Policy reason: javascript-xray-inert-content · Execution scope: test-documentation-data

    Source: tests/browser/ccm-smoke.spec.mjs:3

  • JavaScript analysis reported javascript.xray.shady-link · javascript-analysis webcrack-2.16.0_js-x-ray-16.0.0_signatures-1_literals-1_families-1

    This technical signal is not part of the shipped runtime behavior.

    Policy reason: javascript-xray-inert-content · Execution scope: test-documentation-data

    Source: tests/openai-transport.test.mjs:31

  • zizmor reported excessive-permissions · zizmor 1.28.0

    The code has a known weakness, though this scan does not show that anyone can exploit it here.

    Policy reason: zizmor-known-workflow-rule · Execution scope: automation

    Source: .github/workflows/ci.yml:8-25

  • zizmor reported unpinned-uses · zizmor 1.28.0

    The code has a known weakness, though this scan does not show that anyone can exploit it here.

    Policy reason: zizmor-known-workflow-rule · Execution scope: automation

    Source: .github/workflows/ci.yml:12

  • JavaScript analysis reported javascript.xray.shady-link · javascript-analysis webcrack-2.16.0_js-x-ray-16.0.0_signatures-1_literals-1_families-1

    This technical signal is not part of the shipped runtime behavior.

    Policy reason: javascript-xray-inert-content · Execution scope: test-documentation-data

    Source: tests/request-timeout.test.mjs:17

Contextual expected matches (2)

JavaScript analysis reported javascript.xray.obfuscated-code

Expected behavior · high confidence

The scanner flagged this knowledge management file as potentially obfuscated, but the code is completely readable and performs standard tasks like adding, editing, and deleting character notes. There is no hidden or malicious code.

Technical evidence

Scanner reason: JavaScript analysis matched static JavaScript security signal javascript.xray.obfuscated-code. The match applies to this repository.

Contextual assessment: JS-X-Ray flagged this file for 'obfuscated-code' with low confidence. The supplied source for file is plain, readable JavaScript. It handles CRUD operations for character knowledge entries using standard DOM APIs, prompts, and template literals. No obfuscation, encoded strings, or concealed execution is present. The scanner signal is a false positive.

Impact: none · Exploitability: unlikely

Developer action: none

Scanner
javascript-analysis webcrack-2.16.0_js-x-ray-16.0.0_signatures-1_literals-1_families-1
Rule
javascript.xray.obfuscated-code
File role
tooling
Source
scripts/ui/knowledge.js:1

JavaScript analysis reported javascript.xray.obfuscated-code

Expected behavior · high confidence

The scanner flagged this UI file as potentially obfuscated, but the actual code is clearly readable and performs standard interface tasks like creating panels and lists. There is no hidden or malicious code.

Technical evidence

Scanner reason: JavaScript analysis matched static JavaScript security signal javascript.xray.obfuscated-code. The match applies to this repository.

Contextual assessment: JS-X-Ray flagged this file for 'obfuscated-code' with low confidence. The supplied source for file is plain, readable JavaScript with standard ES module imports, template literals, and DOM manipulation typical of a SillyTavern extension UI module. No obfuscation, encoded strings, eval, or concealed execution is present in the reviewed code. The scanner signal is a false positive.

Impact: none · Exploitability: unlikely

Developer action: none

Scanner
javascript-analysis webcrack-2.16.0_js-x-ray-16.0.0_signatures-1_literals-1_families-1
Rule
javascript.xray.obfuscated-code
File role
tooling
Source
scripts/ui.js:1

Related contextual observations

innerHTML assignment with dynamic template literals

low risk · medium confidence

The code builds parts of the web page by inserting text directly into the HTML. While it escapes text to prevent issues, using this method can sometimes be risky if unexpected data is introduced. No actual risk is shown here.

Technical assessment

The code uses innerHTML with template literals containing dynamic values like escapeHtml(char.name) and formatCharacterUsage(char.id). While escapeHtml is used for user-controlled character names, formatCharacterUsage returns a string derived from local usage stats. This pattern is standard for SillyTavern extensions but could theoretically be a vector if character data is compromised downstream. No demonstrated exploit path exists in the supplied code.

Impact: low · Exploitability: unlikely

Developer action: Consider using textContent or DOM APIs for complex dynamic content insertion where feasible, though current escapeHtml usage mitigates immediate risk.

Sources:

innerHTML in renderKnowledge template

low risk · medium confidence

The code builds HTML for displaying knowledge entries by combining text. Although it escapes the text to prevent injection issues, constructing HTML this way can be riskier than building elements directly. No actual risk is shown here.

Technical assessment

The renderKnowledge function returns an HTML string built via template literals, which is presumably assigned to innerHTML by the caller. It interpolates escapeHtml(item.text) and escapeHtml(item.id). While escapeHtml is applied, constructing HTML via string concatenation is generally less safe than using DOM APIs. No demonstrated exploit path exists in the supplied code.

Impact: low · Exploitability: unlikely

Developer action: Consider using DOM APIs or ensuring escapeHtml is robust for all interpolated values, though current usage mitigates immediate risk.

Sources:

Coverage and limitations

Inventory
151 files · 1028602 bytes
Contextual coverage
16 of 16 candidates assessed

JavaScript coverage

Status
Complete
Candidates
138 files · 937756 bytes
X-Ray review families
16 warning occurrences compacted to 12 evidence-preserving review families
Representations
138 raw · 0 decoded · 0 normalized · 0 bundle modules
Stage scans
138 raw signatures · 138 raw AST · 138 raw OpenGrep · 0 derived signatures · 0 derived AST · 0 derived OpenGrep

Tools

Limitations

Technical scan identity
Full commit
55139230c3d9d411c3390beaaf94b326148f7c55
Completed
History depth
20 commits
Method
Deterministic evidence with contextual review
Reviewer
nano-gpt.com · zai-org/glm-latest
Scanner
0.1.0
Scanner policy
5
Rule catalog
2
Contextual policy
5
Ecosystem context
sillytavern-community-v1
Prompt
contextual-review-v7
Assessment schema
contextual-assessment-v2
Review provenance
2 fresh / 0 reused groups · 2 fresh / 0 reused candidates
Review source reports
none
Evidence triage
14 deterministic / 2 contextual candidates · 2 contextual / 12 total behavior cases
Model budget
1 model call · 2 / 12 fresh cases · 25661 / 200000 estimated input · 19794 / 250000 actual input · 1303 / 40000 output tokens
Review batching
1 model call · up to 2 groups and 2 candidates per call · 0 retry calls · 0 over-budget singleton calls
Review usage
19794 input · 1303 output · 0 cache read · 0 reasoning tokens
Report
f69322f3a1a0b02e04db8e9411c60e52f432f36cb56ee416ccfbf8a2ebc84ce5