A crafted input might briefly slow or freeze the local client, without showing broader security harm.
Technical evidence
Scanner reason: JavaScript analysis matched static JavaScript security signal javascript.xray.unsafe-regex. The match applies to this repository.
Contextual assessment: The expression may permit a local CPU slowdown, but this evidence shows no credential, persistence, code-execution, or cross-user impact.
Impact: low · Exploitability: plausible
Developer action: Bound the input length or replace the expression when practical.
The file loads the normal pieces of the SillyTavern app that an image-generation extension needs, in the standard way extensions do. Nothing here pulls in code from outside the app.
Technical evidence
Scanner reason: JavaScript analysis matched static JavaScript security signal javascript.xray.unsafe-import. The match applies to this repository.
Contextual assessment: Detailed technical wording was omitted by the public report safety filter.
The extension does make network calls, but only to the image services the user has configured, and the suspicious-sounding parts flagged alongside them are ordinary internal code, not remote code being run. The scanner flagged the two things being in the same file, not an actual path from one to the other.
Technical evidence
Scanner reason: JavaScript analysis matched static JavaScript security signal javascript.download-to-execution. The match applies to this repository.
Contextual assessment: The scanner correlates a network retrieval primitive with a dynamic code or command sink in the same file. The supplied source shows the extension calling image-generation endpoints configured by the user (request bodies built from user-set URL and auth settings fields) and, separately, constructing a regular expression from a fixed internal activation pattern plus scheduling its own local generation function. No data flow is shown in which network-retrieved content reaches an execution sink; the flagged correlation is same-file coexistence, not a demonstrated path. The capabilities present match the stated purpose of an image-generation extension that queries backends and reacts to chat messages.
The extension stores the standard local addresses that image-generation tools run on, as the starting values users can change in its settings. This is exactly what an image-generation extension needs and does not send anything anywhere by itself.
Technical evidence
Scanner reason: JavaScript analysis matched static JavaScript security signal javascript.xray.shady-link. The match applies to this repository.
Contextual assessment: The flagged fixed URL literals are default endpoint addresses for local image-generation backends (loopback addresses and localhost ports commonly used by AUTOMATIC1111, stable-diffusion.cpp, and ComfyUI-style servers), stored in a default-settings object alongside matching authentication fields that default to empty strings. These are user-configurable settings fields for an image-generation extension, not hardcoded destinations for exfiltration or hidden network calls. No data flow to any external host is shown; all defaults point to the user's own machine, and the values are plainly visible settings rather than obfuscated strings.