What this review found
No material or high-risk item was identified.
Minor cautions
zizmor reported unpinned-uses
Minor caution · high confidence
The workflow uses a shorthand reference for a standard GitHub action instead of locking it to an exact version. This is a common minor practice gap, not a sign of anything malicious.
Technical evidence
Scanner reason: zizmor matched workflow-security rule unpinned-uses in this repository.
Contextual assessment: The checkout action is pinned to major version v4 rather than a full commit SHA. Major-version pinning is widespread but allows a compromised tag to alter behavior. This workflow only runs lint and format checks with no secrets beyond the default token, limiting impact.
Impact: low · Exploitability: unlikely
Developer action: Pin actions/checkout to a full commit SHA for reproducibility and supply-chain hardening.
- Scanner
- zizmor 1.28.0
- Rule
- unpinned-uses
- File role
- tooling
- Source
- .github/workflows/lint.yml:13
zizmor reported unpinned-uses
Minor caution · high confidence
Same as above: a standard GitHub action is referenced by shorthand instead of an exact locked version. Common minor gap, no malicious intent.
Technical evidence
Scanner reason: zizmor matched workflow-security rule unpinned-uses in this repository.
Contextual assessment: The setup-node action is pinned to major version v4 rather than a full commit SHA. Same supply-chain consideration as checkout. The workflow scope is lint and format only.
Impact: low · Exploitability: unlikely
Developer action: Pin actions/setup-node to a full commit SHA for reproducibility and supply-chain hardening.
- Scanner
- zizmor 1.28.0
- Rule
- unpinned-uses
- File role
- tooling
- Source
- .github/workflows/lint.yml:15
Dependency advisory GHSA-4xrf-jv44-h6hh applies
Minor caution · high confidence
The flagged vulnerability is in a tool used only by the developer for testing or formatting code. It does not affect the actual extension that users install and run in SillyTavern.
Technical evidence
Scanner reason: OSV-Scanner matched advisory GHSA-4xrf-jv44-h6hh to a dependency declared by this repository.
Contextual assessment: The root package in the lockfile declares only devDependencies (e.g., eslint, vitest, prettier). The project README states it runs as a plain browser extension with no build step. Therefore, the vulnerable package is a development tool or a transitive dependency of one and is not shipped to end users. The vulnerability poses no runtime risk to the extension or its users, though it may affect the developer's local environment or CI pipeline.
Impact: low · Exploitability: unlikely
Developer action: Update the affected development dependencies to patched versions when convenient. No urgent action is required for the security of the extension's end users.
- Scanner
- osv-scanner 2.4.0
- Rule
- GHSA-4xrf-jv44-h6hh
- File role
- production
- Source
- package-lock.json
Dependency advisory GHSA-8j4g-w8fx-2239 applies
Minor caution · high confidence
The flagged vulnerability is in a tool used only by the developer for testing or formatting code. It does not affect the actual extension that users install and run in SillyTavern.
Technical evidence
Scanner reason: OSV-Scanner matched advisory GHSA-8j4g-w8fx-2239 to a dependency declared by this repository.
Contextual assessment: The root package in the lockfile declares only devDependencies (e.g., eslint, vitest, prettier). The project README states it runs as a plain browser extension with no build step. Therefore, the vulnerable package is a development tool or a transitive dependency of one and is not shipped to end users. The vulnerability poses no runtime risk to the extension or its users, though it may affect the developer's local environment or CI pipeline.
Impact: low · Exploitability: unlikely
Developer action: Update the affected development dependencies to patched versions when convenient. No urgent action is required for the security of the extension's end users.
- Scanner
- osv-scanner 2.4.0
- Rule
- GHSA-8j4g-w8fx-2239
- File role
- production
- Source
- package-lock.json
Dependency advisory GHSA-v2hh-gcrm-f6hx applies
Minor caution · high confidence
The flagged vulnerability is in a tool used only by the developer for testing or formatting code. It does not affect the actual extension that users install and run in SillyTavern.
Technical evidence
Scanner reason: OSV-Scanner matched advisory GHSA-v2hh-gcrm-f6hx to a dependency declared by this repository.
Contextual assessment: The root package in the lockfile declares only devDependencies (e.g., eslint, vitest, prettier). The project README states it runs as a plain browser extension with no build step. Therefore, the vulnerable package is a development tool or a transitive dependency of one and is not shipped to end users. The vulnerability poses no runtime risk to the extension or its users, though it may affect the developer's local environment or CI pipeline.
Impact: low · Exploitability: unlikely
Developer action: Update the affected development dependencies to patched versions when convenient. No urgent action is required for the security of the extension's end users.
- Scanner
- osv-scanner 2.4.0
- Rule
- GHSA-v2hh-gcrm-f6hx
- File role
- production
- Source
- package-lock.json
Dependency advisory GHSA-mwp4-54f8-5fhr applies
Minor caution · high confidence
The flagged vulnerability is in a tool used only by the developer for testing or formatting code. It does not affect the actual extension that users install and run in SillyTavern.
Technical evidence
Scanner reason: OSV-Scanner matched advisory GHSA-mwp4-54f8-5fhr to a dependency declared by this repository.
Contextual assessment: The root package in the lockfile declares only devDependencies (e.g., eslint, vitest, prettier). The project README states it runs as a plain browser extension with no build step. Therefore, the vulnerable package is a development tool or a transitive dependency of one and is not shipped to end users. The vulnerability poses no runtime risk to the extension or its users, though it may affect the developer's local environment or CI pipeline.
Impact: low · Exploitability: unlikely
Developer action: Update the affected development dependencies to patched versions when convenient. No urgent action is required for the security of the extension's end users.
- Scanner
- osv-scanner 2.4.0
- Rule
- GHSA-mwp4-54f8-5fhr
- File role
- production
- Source
- package-lock.json
Dependency advisory GHSA-3jxr-9vmj-r5cp applies
Minor caution · high confidence
The flagged vulnerability is in a tool used only by the developer for testing or formatting code. It does not affect the actual extension that users install and run in SillyTavern.
Technical evidence
Scanner reason: OSV-Scanner matched advisory GHSA-3jxr-9vmj-r5cp to a dependency declared by this repository.
Contextual assessment: The root package in the lockfile declares only devDependencies (e.g., eslint, vitest, prettier). The project README states it runs as a plain browser extension with no build step. Therefore, the vulnerable package is a development tool or a transitive dependency of one and is not shipped to end users. The vulnerability poses no runtime risk to the extension or its users, though it may affect the developer's local environment or CI pipeline.
Impact: low · Exploitability: unlikely
Developer action: Update the affected development dependencies to patched versions when convenient. No urgent action is required for the security of the extension's end users.
- Scanner
- osv-scanner 2.4.0
- Rule
- GHSA-3jxr-9vmj-r5cp
- File role
- production
- Source
- package-lock.json
zizmor reported excessive-permissions
Minor caution · high confidence
The workflow does not explicitly state what permissions it needs. GitHub applies safe defaults on newer repositories, but spelling out minimal permissions is better hygiene.
Technical evidence
Scanner reason: zizmor matched workflow-security rule excessive-permissions in this repository.
Contextual assessment: The workflow does not declare an explicit permissions block. Modern GitHub repos default to read-only token permissions for pull_request events, but declaring least-privilege permissions explicitly is best practice. This workflow performs only lint and format checks and does not need write scopes.
Impact: low · Exploitability: unlikely
Developer action: Add a top-level permissions block with contents: read to enforce least privilege explicitly.
- Scanner
- zizmor 1.28.0
- Rule
- excessive-permissions
- File role
- tooling
- Source
- .github/workflows/lint.yml:10-23
Dependency advisory GHSA-7p8r-x3mc-p8w7 applies
Minor caution · high confidence
The flagged vulnerability is in a tool used only by the developer for testing or formatting code. It does not affect the actual extension that users install and run in SillyTavern.
Technical evidence
Scanner reason: OSV-Scanner matched advisory GHSA-7p8r-x3mc-p8w7 to a dependency declared by this repository.
Contextual assessment: The root package in the lockfile declares only devDependencies (e.g., eslint, vitest, prettier). The project README states it runs as a plain browser extension with no build step. Therefore, the vulnerable package is a development tool or a transitive dependency of one and is not shipped to end users. The vulnerability poses no runtime risk to the extension or its users, though it may affect the developer's local environment or CI pipeline.
Impact: low · Exploitability: unlikely
Developer action: Update the affected development dependencies to patched versions when convenient. No urgent action is required for the security of the extension's end users.
- Scanner
- osv-scanner 2.4.0
- Rule
- GHSA-7p8r-x3mc-p8w7
- File role
- production
- Source
- package-lock.json
zizmor reported artipacked
Minor caution · medium confidence
A standard checkout step leaves a GitHub token in the local git configuration by default. Since this workflow never uploads artifacts or files, the token is very unlikely to escape. This is a common hygiene item, not a threat.
Technical evidence
Scanner reason: zizmor matched workflow-security rule artipacked in this repository.
Contextual assessment: The checkout action defaults persist-credentials to true, leaving the GITHUB_TOKEN in local git config. This workflow has no artifact upload steps, so token leakage via artifacts is not possible here. The npm ci step executes install scripts which could theoretically read the token, but the workflow runs only first-party lint tooling with no untrusted input injection path visible.
Impact: low · Exploitability: unlikely
Developer action: Set persist-credentials: false on the checkout step to avoid leaving the token in git config when it is not needed for subsequent git operations.
- Scanner
- zizmor 1.28.0
- Rule
- artipacked
- File role
- tooling
- Source
- .github/workflows/lint.yml:13
Dependency advisory GHSA-r28c-9q8g-f849 applies
Minor caution · high confidence
The flagged vulnerability is in a tool used only by the developer for testing or formatting code. It does not affect the actual extension that users install and run in SillyTavern.
Technical evidence
Scanner reason: OSV-Scanner matched advisory GHSA-r28c-9q8g-f849 to a dependency declared by this repository.
Contextual assessment: The root package in the lockfile declares only devDependencies (e.g., eslint, vitest, prettier). The project README states it runs as a plain browser extension with no build step. Therefore, the vulnerable package is a development tool or a transitive dependency of one and is not shipped to end users. The vulnerability poses no runtime risk to the extension or its users, though it may affect the developer's local environment or CI pipeline.
Impact: low · Exploitability: unlikely
Developer action: Update the affected development dependencies to patched versions when convenient. No urgent action is required for the security of the extension's end users.
- Scanner
- osv-scanner 2.4.0
- Rule
- GHSA-r28c-9q8g-f849
- File role
- production
- Source
- package-lock.json
Dependency advisory GHSA-22jq-vg5j-6vgg applies
Minor caution · high confidence
The flagged vulnerability is in a tool used only by the developer for testing or formatting code. It does not affect the actual extension that users install and run in SillyTavern.
Technical evidence
Scanner reason: OSV-Scanner matched advisory GHSA-22jq-vg5j-6vgg to a dependency declared by this repository.
Contextual assessment: The root package in the lockfile declares only devDependencies (e.g., eslint, vitest, prettier). The project README states it runs as a plain browser extension with no build step. Therefore, the vulnerable package is a development tool or a transitive dependency of one and is not shipped to end users. The vulnerability poses no runtime risk to the extension or its users, though it may affect the developer's local environment or CI pipeline.
Impact: low · Exploitability: unlikely
Developer action: Update the affected development dependencies to patched versions when convenient. No urgent action is required for the security of the extension's end users.
- Scanner
- osv-scanner 2.4.0
- Rule
- GHSA-22jq-vg5j-6vgg
- File role
- production
- Source
- package-lock.json
Dependency advisory GHSA-r292-9mhp-454m applies
Minor caution · medium confidence
The scanner found a known security issue in a tool used only by the developer for building or testing the extension. Because these tools are not included in the final extension that users run, this issue does not pose a risk to users.
Technical evidence
Scanner reason: OSV-Scanner matched advisory GHSA-r292-9mhp-454m to a dependency declared by this repository.
Contextual assessment: The flagged advisory corresponds to a development dependency declared in the project's package-lock.json. The root package only declares devDependencies, which are used for linting, testing, and formatting. Since this is a browser extension with no build step, these dependencies are not shipped to end users and do not affect the runtime security of the extension.
Impact: none · Exploitability: unlikely
Developer action: Update the affected development dependency to a patched version when convenient to keep the development environment secure.
- Scanner
- osv-scanner 2.4.0
- Rule
- GHSA-r292-9mhp-454m
- File role
- production
- Source
- package-lock.json
Dependency advisory GHSA-fxqj-rqcc-2cmp applies
Minor caution · medium confidence
The scanner found a known security issue in a tool used only by the developer for building or testing the extension. Because these tools are not included in the final extension that users run, this issue does not pose a risk to users.
Technical evidence
Scanner reason: OSV-Scanner matched advisory GHSA-fxqj-rqcc-2cmp to a dependency declared by this repository.
Contextual assessment: The flagged advisory corresponds to a development dependency declared in the project's package-lock.json. The root package only declares devDependencies, which are used for linting, testing, and formatting. Since this is a browser extension with no build step, these dependencies are not shipped to end users and do not affect the runtime security of the extension.
Impact: none · Exploitability: unlikely
Developer action: Update the affected development dependency to a patched version when convenient to keep the development environment secure.
- Scanner
- osv-scanner 2.4.0
- Rule
- GHSA-fxqj-rqcc-2cmp
- File role
- production
- Source
- package-lock.json
Dependency advisory GHSA-mh99-v99m-4gvg applies
Minor caution · medium confidence
The scanner found a known security issue in a tool used only by the developer for building or testing the extension. Because these tools are not included in the final extension that users run, this issue does not pose a risk to users.
Technical evidence
Scanner reason: OSV-Scanner matched advisory GHSA-mh99-v99m-4gvg to a dependency declared by this repository.
Contextual assessment: The flagged advisory corresponds to a development dependency declared in the project's package-lock.json. The root package only declares devDependencies, which are used for linting, testing, and formatting. Since this is a browser extension with no build step, these dependencies are not shipped to end users and do not affect the runtime security of the extension.
Impact: none · Exploitability: unlikely
Developer action: Update the affected development dependency to a patched version when convenient to keep the development environment secure.
- Scanner
- osv-scanner 2.4.0
- Rule
- GHSA-mh99-v99m-4gvg
- File role
- production
- Source
- package-lock.json
Dependency advisory GHSA-frvp-7c67-39w9 applies
Minor caution · medium confidence
The scanner found a known security issue in a tool used only by the developer for building or testing the extension. Because these tools are not included in the final extension that users run, this issue does not pose a risk to users.
Technical evidence
Scanner reason: OSV-Scanner matched advisory GHSA-frvp-7c67-39w9 to a dependency declared by this repository.
Contextual assessment: The flagged advisory corresponds to a development dependency declared in the project's package-lock.json. The root package only declares devDependencies, which are used for linting, testing, and formatting. Since this is a browser extension with no build step, these dependencies are not shipped to end users and do not affect the runtime security of the extension.
Impact: none · Exploitability: unlikely
Developer action: Update the affected development dependency to a patched version when convenient to keep the development environment secure.
- Scanner
- osv-scanner 2.4.0
- Rule
- GHSA-frvp-7c67-39w9
- File role
- production
- Source
- package-lock.json
Dependency advisory GHSA-rgw5-rvv9-x895 applies
Minor caution · medium confidence
The scanner found a known security issue in a tool used only by the developer for building or testing the extension. Because these tools are not included in the final extension that users run, this issue does not pose a risk to users.
Technical evidence
Scanner reason: OSV-Scanner matched advisory GHSA-rgw5-rvv9-x895 to a dependency declared by this repository.
Contextual assessment: The flagged advisory corresponds to a development dependency declared in the project's package-lock.json. The root package only declares devDependencies, which are used for linting, testing, and formatting. Since this is a browser extension with no build step, these dependencies are not shipped to end users and do not affect the runtime security of the extension.
Impact: none · Exploitability: unlikely
Developer action: Update the affected development dependency to a patched version when convenient to keep the development environment secure.
- Scanner
- osv-scanner 2.4.0
- Rule
- GHSA-rgw5-rvv9-x895
- File role
- production
- Source
- package-lock.json
Expected scanner matches (3)
OpenGrep reported tavernkeeper.download-and-execute.shell-pipeline
Expected behavior · high confidence
This is just a line in a help document telling people how to install a separate issue-tracking tool. It is not part of the extension's code and does not run on its own. The user would have to manually copy and run the command themselves.
Technical evidence
Scanner reason: OpenGrep matched static-analysis rule tavernkeeper.download-and-execute.shell-pipeline in this repository.
Contextual assessment: The flagged content is a standard curl-pipe-to-bash install instruction inside a documentation file (.beads/README.md) for the Beads issue-tracking tool. It is not executable code, does not run automatically, and requires a user to manually copy and paste the command. The pattern is a common open-source installation convention and is fully visible to the reader. It has no relationship to the Summaryception extension's runtime behavior.
Impact: none · Exploitability: unlikely
Developer action: none
- Scanner
- opengrep 1.26.0
- Rule
- tavernkeeper.download-and-execute.shell-pipeline
- File role
- documentation
- Source
- .beads/README.md:64-65
Gitleaks reported vault-service-token
Expected behavior · high confidence
The scanner thought it found a secret password or token, but the line is just resetting a number-based setting back to its default value. There is no password or secret here.
Technical evidence
Scanner reason: Gitleaks matched secret-detection rule vault-service-token in this repository.
Contextual assessment: The flagged line assigns a default configuration value to a settings object property during a reset-to-defaults operation. The property name relates to a token budget target for summarization layers. No credential, secret, token, or sensitive value is present. The scanner matched on the property name pattern, producing a false positive.
Impact: none · Exploitability: unlikely
Developer action: none
- Scanner
- gitleaks 8.30.1
- Rule
- vault-service-token
- File role
- production
- Source
- src/entry/ui-events.js:734
Gitleaks reported vault-service-token
Expected behavior · high confidence
The scanner saw the word 'Token' in a variable name about how many tokens a summary should target, and mistakenly flagged it as a leaked password. The line just resets a number slider to its default value. There is no secret here.
Technical evidence
Scanner reason: Gitleaks matched secret-detection rule vault-service-token in this repository.
Contextual assessment: The scanner matched the substring 'Token' in the property name 'layer0SummaryTokenTarget' on a line that resets a numeric configuration value to its default. This is a settings-reset routine inside an extension UI event handler. No credential, secret, or authentication token is present; the match is a false positive caused by a token-budget variable name colliding with the credential pattern.
Impact: none · Exploitability: unlikely
Developer action: none
- Scanner
- gitleaks 8.30.1
- Rule
- vault-service-token
- File role
- production
- Source
- src/entry/ui-events.js:668