This is an image-generation extension, so contacting image APIs and downloading generated images is exactly what it should do. The API key you enter is sent only to the image provider you selected, which is normal and expected. No hidden code execution was found.
Technical evidence
Scanner reason: JavaScript analysis matched static JavaScript security signal javascript.download-to-execution. The match applies to this repository.
Contextual assessment: The scanner flags co-occurrence of network fetch primitives and a suspected code-execution sink. The visible fetch calls go to image-generation provider endpoints (linkapi.ai, tokenreply.com, local SillyTavern avatar/character routes) and download image bytes or JSON, which matches the extension's stated purpose. The API key is read from extension_settings and sent only as an Authorization header to the selected provider endpoint. No eval, Function constructor, import(), or command-execution primitive is present in the supplied source. The window.cigDebug assignment exposes pure helper functions for console debugging but does not execute remote code. arrayBufferToBase64 uses String.fromCharCode.apply and btoa for encoding, not code execution. The scanner correlation does not demonstrate a download-to-execution data flow.
The flagged file is a plain, readable list of provider settings and model definitions. There is no hidden or disguised code whatsoever. The scanner alert appears to be a false positive.
Technical evidence
Scanner reason: JavaScript analysis matched static JavaScript security signal javascript.xray.obfuscated-code. The match applies to this repository.
Contextual assessment: Detailed technical wording was omitted by the public report safety filter.
The extension exposes a few helper functions on the window object for developer debugging. This does not run remote code and only includes utility functions, not credential handling.
Technical assessment
The window.cigDebug assignment exposes isOpenAiImageModel, mapAspectRatioToSize, extractPromptText, parseImagesResponse, and requestLinkApiImage for console testing. These are pure or stateless helpers; no credential storage or dynamic evaluation is exposed. This is a common dev-aid pattern and does not constitute a code-execution sink.