TavernKeeper Scan Report

unrefined803/RPGraph

Commit 8006e53 Reviewed Aug 12, 2026

No material or immediate-danger concern was identified in this review.

This advisory report describes what the named tools and review process found at one exact commit. Unknown or unobserved behavior may still exist.

0 immediate danger 0 material 31 low

What this review found

No material or immediate-danger item was identified.

Minor cautions

JavaScript analysis reported javascript.xray.unsafe-regex

Minor caution · medium confidence

A crafted input might briefly slow or freeze the local client, without showing broader security harm.

Technical evidence

Scanner reason: JavaScript analysis matched static JavaScript security signal javascript.xray.unsafe-regex. The match applies to this repository.

Contextual assessment: The expression may permit a local CPU slowdown, but this evidence shows no credential, persistence, code-execution, or cross-user impact.

Impact: low · Exploitability: plausible

Developer action: Bound the input length or replace the expression when practical.

Scanner: javascript-analysis webcrack-2.16.0_js-x-ray-16.0.0_signatures-1_literals-1_families-1
Rule: javascript.xray.unsafe-regex
File role: production
Source: electron/main.cjs:2453

Deterministic technical evidence (8)

Dependency advisory GHSA-2v37-7h3g-55p8:pkg:c301f7c72c558e741e2a83a0 applies · osv-scanner 2.4.0

A dependency has a published security issue, though this scan does not show that the project exposes it to an attacker.

Policy reason: osv-structured-advisory · Execution scope: unknown

Source: package-lock.json
Dependency advisory GHSA-8xcm-r25x-g524:pkg:9efcb22ccad71d16e9fbb4db applies · osv-scanner 2.4.0

A dependency has a published security issue, though this scan does not show that the project exposes it to an attacker.

Policy reason: osv-structured-advisory · Execution scope: unknown

Source: package-lock.json
Dependency advisory GHSA-4cwx-7wf7-3272:pkg:1176429e737cfabdf766cdff applies · osv-scanner 2.4.0

A dependency has a published security issue, though this scan does not show that the project exposes it to an attacker.

Policy reason: osv-structured-advisory · Execution scope: unknown

Source: package-lock.json
Dependency advisory GHSA-m8rv-5g2x-5cg5:pkg:effd824192445928106e41b7 applies · osv-scanner 2.4.0

A dependency has a published security issue, though this scan does not show that the project exposes it to an attacker.

Policy reason: osv-structured-advisory · Execution scope: unknown

Source: package-lock.json
Dependency advisory GHSA-9f4c-93c8-jc8g:pkg:efaea3d20909e7a86cc5178e applies · osv-scanner 2.4.0

A dependency has a published security issue, though this scan does not show that the project exposes it to an attacker.

Policy reason: osv-structured-advisory · Execution scope: unknown

Source: package-lock.json
Dependency advisory GHSA-r4w5-6pfg-jxp5:pkg:1b5485487a562a9e909542d7 applies · osv-scanner 2.4.0

A dependency has a published security issue, though this scan does not show that the project exposes it to an attacker.

Policy reason: osv-structured-advisory · Execution scope: unknown

Source: package-lock.json
Dependency advisory GHSA-v3r7-h72x-cjcm:pkg:2f99006f4e2ddba635fa3089 applies · osv-scanner 2.4.0

A dependency has a published security issue, though this scan does not show that the project exposes it to an attacker.

Policy reason: osv-structured-advisory · Execution scope: unknown

Source: package-lock.json
Dependency advisory GHSA-jr45-8vmc-qm54:pkg:ef6cbe09bba3516afec0221f applies · osv-scanner 2.4.0

A dependency has a published security issue, though this scan does not show that the project exposes it to an attacker.

Policy reason: osv-structured-advisory · Execution scope: unknown

Source: package-lock.json

Contextual expected matches (22)

OpenGrep reported tavernkeeper.persistence.startup-modification

Expected behavior · high confidence

This is a normal style for when the user clicks a profile picture cropper. It has nothing to do with startup or security.

Technical evidence

Scanner reason: OpenGrep matched static-analysis rule tavernkeeper.persistence.startup-modification. The match applies to this repository.

Contextual assessment: Line 15866 in file defines a CSS pseudo-class rule for .profile-pick-crop:active. CSS files contain no executable code and cannot modify application startup behavior or persistence. The scanner rule is triggered by a keyword pattern without context and is a false positive.

Impact: none · Exploitability: unlikely

Developer action: none

Scanner: opengrep 1.26.0
Rule: tavernkeeper.persistence.startup-modification
File role: production
Source: src/styles.css:15866

OpenGrep reported tavernkeeper.persistence.startup-modification

Expected behavior · high confidence

This is just a CSS style for a popup window in the app. It doesn't do anything besides change colors and layout, so there's no security concern.

Technical evidence

Scanner reason: OpenGrep matched static-analysis rule tavernkeeper.persistence.startup-modification. The match applies to this repository.

Contextual assessment: The flagged line at position 15816 is a CSS class selector (.profile-pick-stage) and its style rules. This is a static CSS rule with no executable logic, no persistence mechanism, and no startup modification capability. The opengrep rule 'startup-modification' is a false positive on CSS content.

Impact: none · Exploitability: unlikely

Developer action: none

Scanner: opengrep 1.26.0
Rule: tavernkeeper.persistence.startup-modification
File role: production
Source: src/styles.css:15816

OpenGrep reported tavernkeeper.persistence.startup-modification

Expected behavior · high confidence

This is just a CSS style for a header inside a popup. It only affects the look and has no security impact.

Technical evidence

Scanner reason: OpenGrep matched static-analysis rule tavernkeeper.persistence.startup-modification. The match applies to this repository.

Contextual assessment: The flagged line at position 15805 is a CSS rule for .profile-pick-header h4. This is a static style declaration with no executable logic, no persistence mechanism, and no startup modification capability. The opengrep rule is a false positive on CSS content.

Impact: none · Exploitability: unlikely

Developer action: none

Scanner: opengrep 1.26.0
Rule: tavernkeeper.persistence.startup-modification
File role: production
Source: src/styles.css:15805

OpenGrep reported tavernkeeper.persistence.startup-modification

Expected behavior · high confidence

This is a normal style for an image frame in the profile picker UI. It does not affect startup.

Technical evidence

Scanner reason: OpenGrep matched static-analysis rule tavernkeeper.persistence.startup-modification. The match applies to this repository.

Contextual assessment: Line 15827 in file defines the CSS class .profile-pick-image-frame. CSS files contain no executable logic and cannot modify startup persistence or any application behavior beyond styling. The scanner rule is a false positive due to keyword matching.

Impact: none · Exploitability: unlikely

Developer action: none

Scanner: opengrep 1.26.0
Rule: tavernkeeper.persistence.startup-modification
File role: production
Source: src/styles.css:15827

OpenGrep reported tavernkeeper.persistence.startup-modification

Expected behavior · high confidence

This is a normal style for a resize handle on the crop overlay. It is harmless.

Technical evidence

Scanner reason: OpenGrep matched static-analysis rule tavernkeeper.persistence.startup-modification. The match applies to this repository.

Contextual assessment: Line 15878 in file defines the CSS class .profile-pick-crop-resize. This is a purely visual style rule with no executable capability. It cannot modify startup behavior or persistence. The scanner alert is a false positive.

Impact: none · Exploitability: unlikely

Developer action: none

Scanner: opengrep 1.26.0
Rule: tavernkeeper.persistence.startup-modification
File role: production
Source: src/styles.css:15878

OpenGrep reported tavernkeeper.persistence.startup-modification

Expected behavior · high confidence

This is just a CSS style for text inside a popup header. It only changes font size and color, nothing risky.

Technical evidence

Scanner reason: OpenGrep matched static-analysis rule tavernkeeper.persistence.startup-modification. The match applies to this repository.

Contextual assessment: The flagged line at position 15800 is a CSS selector .profile-pick-header h4,.profile-pick-header p. This is a static style declaration with no executable logic, no persistence mechanism, and no startup modification capability. The opengrep rule is a false positive on CSS content.

Impact: none · Exploitability: unlikely

Developer action: none

Scanner: opengrep 1.26.0
Rule: tavernkeeper.persistence.startup-modification
File role: production
Source: src/styles.css:15800

JavaScript analysis reported javascript.xray.data-exfiltration

Expected behavior · high confidence

The program uses a standard system information module to understand the computer it runs on, which is normal for desktop applications. No data is being stolen.

Technical evidence

Scanner reason: JavaScript analysis matched static JavaScript security signal javascript.xray.data-exfiltration. The match applies to this repository.

Contextual assessment: The 'data-exfiltration' signal is triggered by the standard Node.js 'os' module require statement. This module provides operating system utilities and is widely used for legitimate purposes such as path construction, platform detection, and environment handling. No evidence of credential theft or data exfiltration exists in the code.

Impact: none · Exploitability: unlikely

Developer action: none

Scanner: javascript-analysis webcrack-2.16.0_js-x-ray-16.0.0_signatures-1_literals-1_families-1
Rule: javascript.xray.data-exfiltration
File role: production
Source: electron/main.cjs:8

JavaScript analysis reported javascript.xray.shady-link

Expected behavior · high confidence

The program connects to AI services to generate story content. The detected 'data' variable is just a container for the AI's responses, not a suspicious link.

Technical evidence

Scanner reason: JavaScript analysis matched static JavaScript security signal javascript.xray.shady-link. The match applies to this repository.

Contextual assessment: The 'shady-link' signal fires on the 'data' variable name in a destructured require statement. This variable is used to store API response data from legitimate HTTP requests to local and remote AI services (LM Studio, Ollama, Gemini, OpenRouter). The application's purpose is to make network calls to AI backends, and this is fully consistent with that purpose. No malicious link or exfiltration.

Impact: none · Exploitability: unlikely

Developer action: none

Scanner: javascript-analysis webcrack-2.16.0_js-x-ray-16.0.0_signatures-1_literals-1_families-1
Rule: javascript.xray.shady-link
File role: production
Source: electron/main.cjs:49

JavaScript analysis reported javascript.xray.shady-link

Expected behavior · high confidence

A test file contains a fake image data URL to check if the program handles images correctly. This is just test data, not a real link.

Technical evidence

Scanner reason: JavaScript analysis matched static JavaScript security signal javascript.xray.shady-link. The match applies to this repository.

Contextual assessment: The 'shady-link' signal fires on a 'data:image/png;base64,...' string used as test fixture data in a unit test for the LM Studio chat body builder. This is a hardcoded test value, not a dynamic or external link. No network involvement or risk.

Impact: none · Exploitability: unlikely

Developer action: none

Scanner: javascript-analysis webcrack-2.16.0_js-x-ray-16.0.0_signatures-1_literals-1_families-1
Rule: javascript.xray.shady-link
File role: test
Source: electron/lmStudioChat.test.ts:41

JavaScript analysis reported javascript.xray.unsafe-command

Expected behavior · high confidence

This script runs a couple of fixed git commands to set up code quality hooks when you install the project. It only runs on your own machine and can't be tricked by an attacker because it doesn't use any outside information.

Technical evidence

Scanner reason: JavaScript analysis matched static JavaScript security signal javascript.xray.unsafe-command. The match applies to this repository.

Contextual assessment: The script uses execSync to run hardcoded git commands ('git rev-parse --is-inside-work-tree' and 'git config core.hooksPath .githooks') with no user-controlled input. All strings are literals, and the operation is a standard setup task for installing project git hooks. The script is invoked only via the 'prepare' npm script during development installation and gracefully handles failures when not in a git work tree. There is no pathway for attacker input or exfiltration.

Impact: none · Exploitability: unlikely

Developer action: none

Scanner: javascript-analysis webcrack-2.16.0_js-x-ray-16.0.0_signatures-1_literals-1_families-1
Rule: javascript.xray.unsafe-command
File role: tooling
Source: scripts/setup-git-hooks.mjs:8-10

OpenGrep reported tavernkeeper.persistence.startup-modification

Expected behavior · high confidence

This is a normal style for a handle inside the crop circle. It does not do anything beyond visual appearance.

Technical evidence

Scanner reason: OpenGrep matched static-analysis rule tavernkeeper.persistence.startup-modification. The match applies to this repository.

Contextual assessment: Line 15870 in file defines the CSS class .profile-pick-crop-handle. CSS rules cannot execute code or affect startup persistence. The scanner rule is a false positive triggered by pattern matching without context.

Impact: none · Exploitability: unlikely

Developer action: none

Scanner: opengrep 1.26.0
Rule: tavernkeeper.persistence.startup-modification
File role: production
Source: src/styles.css:15870

JavaScript analysis reported javascript.xray.serialize-environment

Expected behavior · high confidence

The program copies environment settings to start the main app as a separate process. This is a normal way to run programs, and the copied settings stay on your computer.

Technical evidence

Scanner reason: JavaScript analysis matched static JavaScript security signal javascript.xray.serialize-environment. The match applies to this repository.

Contextual assessment: The 'serialize-environment' signal is raised by copying the parent process environment into a child process environment object before spawning Electron. This is a standard and necessary practice for launching a subprocess that needs access to the user's shell environment. The code explicitly removes ELECTRON_RUN_AS_NODE to prevent a known bug, demonstrating conscientious handling. No environment data is transmitted anywhere; it remains entirely local.

Impact: none · Exploitability: unlikely

Developer action: none

Scanner: javascript-analysis webcrack-2.16.0_js-x-ray-16.0.0_signatures-1_literals-1_families-1
Rule: javascript.xray.serialize-environment
File role: tooling
Source: scripts/run-electron.mjs:7

OpenGrep reported tavernkeeper.persistence.startup-modification

Expected behavior · high confidence

This is just a CSS style for paragraph text inside a popup header. It only changes appearance, no security risk.

Technical evidence

Scanner reason: OpenGrep matched static-analysis rule tavernkeeper.persistence.startup-modification. The match applies to this repository.

Contextual assessment: The flagged line at position 15801 is a CSS rule for .profile-pick-header p. This is a static style declaration with no executable logic, no persistence mechanism, and no startup modification capability. The opengrep rule is a false positive on CSS content.

Impact: none · Exploitability: unlikely

Developer action: none

Scanner: opengrep 1.26.0
Rule: tavernkeeper.persistence.startup-modification
File role: production
Source: src/styles.css:15801

OpenGrep reported tavernkeeper.persistence.startup-modification

Expected behavior · high confidence

This is just a CSS style for a header bar in a popup. It only affects layout and colors, no security concern.

Technical evidence

Scanner reason: OpenGrep matched static-analysis rule tavernkeeper.persistence.startup-modification. The match applies to this repository.

Contextual assessment: The flagged line at position 15791 is a CSS class selector .profile-pick-header. This is a static style declaration with no executable logic, no persistence mechanism, and no startup modification capability. The opengrep rule is a false positive on CSS content.

Impact: none · Exploitability: unlikely

Developer action: none

Scanner: opengrep 1.26.0
Rule: tavernkeeper.persistence.startup-modification
File role: production
Source: src/styles.css:15791

OpenGrep reported tavernkeeper.persistence.startup-modification

Expected behavior · high confidence

This is just a CSS style for a dialog box in the app. It only sets width, padding, background color, etc., with no security impact.

Technical evidence

Scanner reason: OpenGrep matched static-analysis rule tavernkeeper.persistence.startup-modification. The match applies to this repository.

Contextual assessment: The flagged line at position 15778 is a CSS class selector .profile-pick-dialog. This is a static style declaration with no executable logic, no persistence mechanism, and no startup modification capability. The opengrep rule is a false positive on CSS content.

Impact: none · Exploitability: unlikely

Developer action: none

Scanner: opengrep 1.26.0
Rule: tavernkeeper.persistence.startup-modification
File role: production
Source: src/styles.css:15778

JavaScript analysis reported javascript.xray.shady-link

Expected behavior · high confidence

The program reads streaming data from an AI model using the standard SSE format. The detected 'data:' string is part of this normal data reading process, not a malicious link.

Technical evidence

Scanner reason: JavaScript analysis matched static JavaScript security signal javascript.xray.shady-link. The match applies to this repository.

Contextual assessment: The 'shady-link' signal fires on the 'data:' prefix check in an SSE parser for LM Studio streaming responses. This is standard SSE protocol handling, constructing a data URL or routing URL fragments. No network exfiltration or phishing behavior is present; the parsed data is consumed locally to process AI model output.

Impact: none · Exploitability: unlikely

Developer action: none

Scanner: javascript-analysis webcrack-2.16.0_js-x-ray-16.0.0_signatures-1_literals-1_families-1
Rule: javascript.xray.shady-link
File role: production
Source: electron/lmStudioChat.cjs:127

OpenGrep reported tavernkeeper.persistence.startup-modification

Expected behavior · high confidence

This is a normal style for the action buttons area in the profile picker. It is not related to startup.

Technical evidence

Scanner reason: OpenGrep matched static-analysis rule tavernkeeper.persistence.startup-modification. The match applies to this repository.

Contextual assessment: Line 15892 in file defines the CSS class .profile-pick-actions. CSS has no executable capabilities and cannot modify startup behavior or persistence. The scanner alert is a false positive.

Impact: none · Exploitability: unlikely

Developer action: none

Scanner: opengrep 1.26.0
Rule: tavernkeeper.persistence.startup-modification
File role: production
Source: src/styles.css:15892

OpenGrep reported tavernkeeper.persistence.startup-modification

Expected behavior · high confidence

This is a normal dark overlay behind the crop area. It has no effect on startup.

Technical evidence

Scanner reason: OpenGrep matched static-analysis rule tavernkeeper.persistence.startup-modification. The match applies to this repository.

Contextual assessment: Line 15843 in file defines the CSS class .profile-pick-scrim. This is a visual overlay style with no executable logic. It cannot affect startup persistence. The scanner rule is a false positive.

Impact: none · Exploitability: unlikely

Developer action: none

Scanner: opengrep 1.26.0
Rule: tavernkeeper.persistence.startup-modification
File role: production
Source: src/styles.css:15843

OpenGrep reported tavernkeeper.persistence.startup-modification

Expected behavior · high confidence

This is a normal style for the crop circle overlay. It does not affect startup.

Technical evidence

Scanner reason: OpenGrep matched static-analysis rule tavernkeeper.persistence.startup-modification. The match applies to this repository.

Contextual assessment: Line 15850 in file defines the CSS class .profile-pick-crop. CSS files contain no executable instructions and cannot modify startup behavior or persistence. The scanner alert is a false positive.

Impact: none · Exploitability: unlikely

Developer action: none

Scanner: opengrep 1.26.0
Rule: tavernkeeper.persistence.startup-modification
File role: production
Source: src/styles.css:15850

OpenGrep reported tavernkeeper.persistence.startup-modification

Expected behavior · high confidence

This is a normal style for images inside the profile picker. It is harmless.

Technical evidence

Scanner reason: OpenGrep matched static-analysis rule tavernkeeper.persistence.startup-modification. The match applies to this repository.

Contextual assessment: Detailed technical wording was omitted by the public report safety filter.

Impact: none · Exploitability: unlikely

Developer action: none

Scanner: opengrep 1.26.0
Rule: tavernkeeper.persistence.startup-modification
File role: production
Source: src/styles.css:15836

OpenGrep reported tavernkeeper.persistence.startup-modification

Expected behavior · high confidence

This is just a CSS style for a dark overlay behind a popup. It only affects the visual backdrop, no security risk.

Technical evidence

Scanner reason: OpenGrep matched static-analysis rule tavernkeeper.persistence.startup-modification. The match applies to this repository.

Contextual assessment: The flagged line at position 15767 is a CSS class selector .profile-pick-backdrop. This is a static style declaration with no executable logic, no persistence mechanism, and no startup modification capability. The opengrep rule is a false positive on CSS content.

Impact: none · Exploitability: unlikely

Developer action: none

Scanner: opengrep 1.26.0
Rule: tavernkeeper.persistence.startup-modification
File role: production
Source: src/styles.css:15767

OpenGrep reported tavernkeeper.persistence.startup-modification

Expected behavior · high confidence

This is just a CSS style for paragraph text inside a popup header. It only changes font size and color, nothing risky.

Technical evidence

Scanner reason: OpenGrep matched static-analysis rule tavernkeeper.persistence.startup-modification. The match applies to this repository.

Contextual assessment: The flagged line at position 15810 is a CSS rule for .profile-pick-header p. This is a static style declaration with no executable logic, no persistence mechanism, and no startup modification capability. The opengrep rule is a false positive on CSS content.

Impact: none · Exploitability: unlikely

Developer action: none

Scanner: opengrep 1.26.0
Rule: tavernkeeper.persistence.startup-modification
File role: production
Source: src/styles.css:15810

Coverage and limitations

Inventory: 383 files · 24802359 bytes
Contextual coverage: 31 of 31 candidates assessed

JavaScript coverage

Status: Incomplete
Candidates: 308 files · 3842160 bytes
X-Ray review families: 19 warning occurrences compacted to 7 evidence-preserving review families
Representations: 308 raw · 20 decoded · 2 normalized · 0 bundle modules
Stage scans: 308 raw signatures · 29 raw AST · 308 raw OpenGrep · 22 derived signatures · 4 derived AST · 22 derived OpenGrep

Unresolved JavaScript stages

electron/workflowDefaults.test.ts — raw-ast / parse
src/App.tsx — raw-ast / parse
src/app/debugSnapshot.ts — raw-ast / parse
src/app/providerCapabilities.ts — raw-ast / parse
src/app/runOrchestration.ts — raw-ast / parse
src/app/turnTrace.ts — raw-ast / parse
src/app/useCustomNodeAssistant.ts — raw-ast / parse
src/app/useDirectAppActions.ts — raw-ast / parse
src/app/useGraphRun.ts — raw-ast / parse
src/app/useNodeActionsController.ts — raw-ast / parse
src/app/useNodeContextMenu.ts — raw-ast / parse
src/app/useNodeLlmApi.ts — raw-ast / parse
src/app/useNodePalette.ts — raw-ast / parse
src/app/useProviderConnections.ts — raw-ast / parse
src/app/useRoleplayPanelRuntime.ts — raw-ast / parse
src/app/useRpgraphFiles.ts — raw-ast / parse
src/app/useRunLifecycle.ts — raw-ast / parse
src/app/useRuntimeNodePatching.ts — raw-ast / parse
src/app/useTurnTraceState.ts — raw-ast / parse
src/app/useUiScaling.ts — raw-ast / parse
src/app/useWorkflowCapabilities.ts — raw-ast / parse
src/app/useWorkflowVariables.ts — raw-ast / parse
src/app/workflowHydration.test.ts — raw-ast / parse
src/app/workflowHydration.ts — raw-ast / parse
src/app/workflowSnapshot.ts — raw-ast / parse
src/assistant/workflowSnapshot.ts — raw-ast / parse
src/chat/AutoplayControl.tsx — raw-ast / parse
src/chat/PhoneTab.tsx — raw-ast / parse
src/chat/RunProgressCard.tsx — raw-ast / parse
src/chat/VoicePlaybackDialog.tsx — raw-ast / parse
src/chat/bankTransfers.ts — raw-ast / parse
src/chat/bankingDummyTransactions.ts — raw-ast / parse
src/chat/dialogueVoiceSegments.ts — raw-ast / parse
src/chat/directAppActions.ts — raw-ast / parse
src/chat/imageGenerationAssistant.ts — raw-ast / parse
src/chat/inputTransforms.ts — raw-ast / parse
src/chat/instructions.ts — raw-ast / parse
src/chat/messageFormats.ts — raw-ast / parse
src/chat/onlyFriendsWallet.ts — raw-ast / parse
src/chat/outputActions.ts — raw-ast / parse
src/chat/phoneAppHistoryMessages.ts — raw-ast / parse
src/chat/phoneAppsSessions.ts — raw-ast / parse
src/chat/phoneCharacters.ts — raw-ast / parse
src/chat/phoneMessages.ts — raw-ast / parse
src/chat/phoneReplies.ts — raw-ast / parse
src/chat/referenceImages.ts — raw-ast / parse
src/chat/rpOutput.ts — raw-ast / parse
src/chat/rpPictures.ts — raw-ast / parse
src/chat/socialCatalogs.ts — raw-ast / parse
src/chat/socialDirectory.ts — raw-ast / parse
src/chat/socialMedia.ts — raw-ast / parse
src/chat/socialMessageValidation.ts — raw-ast / parse
src/chat/structuredCommands.ts — raw-ast / parse
src/chat/textRendering.ts — raw-ast / parse
src/chat/translationEmojiShield.ts — raw-ast / parse
src/chat/ttsNarratorPrompt.ts — raw-ast / parse
src/chat/turns.ts — raw-ast / parse
src/chat/useAutoplay.ts — raw-ast / parse
src/chat/useChatGpdPhoneApp.ts — raw-ast / parse
src/chat/useDialogueVoice.ts — raw-ast / parse
src/chat/useNextTurnReferenceImages.ts — raw-ast / parse
src/chat/usePhoneReply.ts — raw-ast / parse
src/chat/useTurnRecordState.ts — raw-ast / parse
src/comfy/ComfyGeneratedImageDialog.tsx — raw-ast / parse
src/comfy/api.ts — raw-ast / parse
src/comfy/connectionRole.ts — raw-ast / parse
src/comfy/defaultNarratorVoice.ts — raw-ast / parse
src/comfy/workflowCompatibility.ts — raw-ast / parse
src/components/AppDialogs.tsx — raw-ast / parse
src/components/AssistantDialog.tsx — raw-ast / parse
src/components/BankTransferCard.tsx — raw-ast / parse
src/components/CharacterAvatar.tsx — raw-ast / parse
src/components/ChatConversationPanel.tsx — raw-ast / parse
src/components/CommandPillComposer.tsx — raw-ast / parse
src/components/CreatedPhoneNoteCard.tsx — raw-ast / parse
src/components/DarkAudioPlayer.tsx — raw-ast / parse
src/components/ErrorBoundary.tsx — raw-ast / parse
src/components/EventsPanel.tsx — raw-ast / parse
src/components/ImageContextControl.tsx — raw-ast / parse
src/components/ImageGenerationAssistantDialog.tsx — raw-ast / parse
src/components/LiveRunClock.tsx — raw-ast / parse
src/components/ModelIdPicker.tsx — raw-ast / parse
src/components/PhoneBankingScreen.tsx — raw-ast / parse
src/components/PhoneChatGpdScreen.tsx — raw-ast / parse
src/components/PhoneGalleryScreen.tsx — raw-ast / parse
src/components/PhoneImagePicker.tsx — raw-ast / parse
src/components/PhoneNotesScreen.tsx — raw-ast / parse
src/components/PhonePanel.tsx — raw-ast / parse
src/components/PhoneVoiceMessage.tsx — raw-ast / parse
src/components/PromptPresetOverview.tsx — raw-ast / parse
src/components/ResourceMonitor.tsx — raw-ast / parse
src/components/SimulatedAiChatCard.tsx — raw-ast / parse
src/components/SocialPostCard.tsx — raw-ast / parse
src/components/StatLine.tsx — raw-ast / parse
src/components/StorybookEditorDialog.tsx — raw-ast / parse
src/components/TurnTraceDialog.tsx — raw-ast / parse
src/components/WelcomeDialog.tsx — raw-ast / parse
src/components/WorkflowCapabilityStrip.tsx — raw-ast / parse
src/components/phone-social/PhoneSocialDirectMessages.tsx — raw-ast / parse
src/components/phone-social/PhoneSocialFeedScreen.tsx — raw-ast / parse

Tools

inventory 0.1.0 — completed
tavernkeeper-static 5 — completed
gitleaks 8.30.1 — completed
opengrep 1.26.0 — completed
javascript-analysis webcrack-2.16.0_js-x-ray-16.0.0_signatures-1_literals-1_families-1 — completed
osv-scanner 2.4.0 — completed
zizmor 1.28.0 — not-applicable
malcontent 1.25.7 — completed

Limitations

This advisory review cannot prove the absence of unknown behavior.
JavaScript analysis was incomplete, so this first-filter scan supports no clean conclusion about unobserved behavior.

Technical scan identity

Full commit: 8006e5389df120b7e5f1316e77bc3e19fb59c514
Completed: Aug 12, 2026
History depth: 4 commits
Method: Deterministic evidence with contextual review
Reviewer: nano-gpt.com · deepseek/deepseek-v4-flash:thinking
Scanner: 0.1.0
Scanner policy: 5
Rule catalog: 2
Contextual policy: 5
Ecosystem context: sillytavern-community-v1
Prompt: contextual-review-v7
Assessment schema: contextual-assessment-v2
Review provenance: 7 fresh / 0 reused groups · 22 fresh / 0 reused candidates
Review source reports: none
Evidence triage: 9 deterministic / 22 contextual candidates · 7 contextual / 9 total behavior cases
Model budget: 5 model calls · 7 / 12 fresh cases · 156969 / 200000 estimated input · 156052 / 250000 actual input · 14214 / 40000 output tokens
Review batching: 5 model calls · up to 4 groups and 9 candidates per call · 2 retry calls · 0 over-budget singleton calls
Review usage: 156052 input · 14214 output · 52143 cache read · 0 reasoning tokens
Report: 0ac386969caf94e26228ae1e8c4e5ef13d6fd34c6be034aa8fbc23ded8c81734