The scanner flagged possible obfuscated code, but the file is plainly readable prompt-template text using SillyTavern macro syntax. There is no obfuscation, encoding, or hidden logic.
Technical evidence
Scanner reason: JavaScript analysis matched static JavaScript security signal javascript.xray.obfuscated-code. The match applies to this repository.
Contextual assessment: The JS-X-Ray obfuscated-code signal has low scanner confidence. The supplied source is a straightforward ES module exporting constant arrays and objects containing SillyTavern prompt template strings with macro placeholders like {{setvar::}} and {{getvar::}}. There are no encoded strings, eval sinks, packed payloads, or concealed control flow. The signal is a false positive on template-literal-heavy prompt content.
The scanner flagged a possible download-to-execution pattern, but the actual code does not download remote code or execute it. The extension reads its own script URL to build a base path and uses standard SillyTavern APIs to inject prompt text. No hidden or malicious execution is present.
Technical evidence
Scanner reason: JavaScript analysis matched static JavaScript security signal javascript.download-to-execution. The match applies to this repository.
Contextual assessment: The scanner correlated a network retrieval primitive with a code execution sink across the file. On inspection, getBaseUrl reads script src attributes from the DOM to derive a local path; there is no fetch, XMLHttpRequest, import(), eval, or Function constructor in the supplied source. The innerHTML assignments render UI markup and, in renderWindowBody, insert a state block extracted from local chat messages. While inserting AI-generated chat content into innerHTML without full sanitization is a minor hygiene concern, it operates within the same SillyTavern origin on local data and matches the extension's stated purpose of displaying internal state blocks. No remote code retrieval or dynamic execution sink is demonstrated.