TavernKeeper Scan Report

Mezi99/SillyTavern-InternalStates

Commit 8a9b070 Reviewed

No material or immediate-danger concern was identified in this review.

This advisory report describes what the named tools and review process found at one exact commit. Unknown or unobserved behavior may still exist.

0 immediate danger 0 material 2 low

What this review found

No material or immediate-danger item was identified.

Contextual expected matches (2)

JavaScript analysis reported javascript.xray.obfuscated-code

Expected behavior · high confidence

The scanner flagged possible obfuscated code, but the file is plainly readable prompt-template text using SillyTavern macro syntax. There is no obfuscation, encoding, or hidden logic.

Technical evidence

Scanner reason: JavaScript analysis matched static JavaScript security signal javascript.xray.obfuscated-code. The match applies to this repository.

Contextual assessment: The JS-X-Ray obfuscated-code signal has low scanner confidence. The supplied source is a straightforward ES module exporting constant arrays and objects containing SillyTavern prompt template strings with macro placeholders like {{setvar::}} and {{getvar::}}. There are no encoded strings, eval sinks, packed payloads, or concealed control flow. The signal is a false positive on template-literal-heavy prompt content.

Impact: none · Exploitability: unlikely

Developer action: none

Scanner
javascript-analysis webcrack-2.16.0_js-x-ray-16.0.0_signatures-1_literals-1_families-1
Rule
javascript.xray.obfuscated-code
File role
production
Source
states.js:1

JavaScript analysis reported javascript.download-to-execution

Expected behavior · medium confidence

The scanner flagged a possible download-to-execution pattern, but the actual code does not download remote code or execute it. The extension reads its own script URL to build a base path and uses standard SillyTavern APIs to inject prompt text. No hidden or malicious execution is present.

Technical evidence

Scanner reason: JavaScript analysis matched static JavaScript security signal javascript.download-to-execution. The match applies to this repository.

Contextual assessment: The scanner correlated a network retrieval primitive with a code execution sink across the file. On inspection, getBaseUrl reads script src attributes from the DOM to derive a local path; there is no fetch, XMLHttpRequest, import(), eval, or Function constructor in the supplied source. The innerHTML assignments render UI markup and, in renderWindowBody, insert a state block extracted from local chat messages. While inserting AI-generated chat content into innerHTML without full sanitization is a minor hygiene concern, it operates within the same SillyTavern origin on local data and matches the extension's stated purpose of displaying internal state blocks. No remote code retrieval or dynamic execution sink is demonstrated.

Impact: none · Exploitability: unlikely

Developer action: none

Scanner
javascript-analysis webcrack-2.16.0_js-x-ray-16.0.0_signatures-1_literals-1_families-1
Rule
javascript.download-to-execution
File role
production
Source
index.js:12-890

Coverage and limitations

JavaScript coverage

Tools

Limitations

Technical scan identity