TavernKeeper Scan Report

LordElMelonII/LoreStitch

Commit 115c95a Reviewed Oct 9, 2026

No material or immediate-danger concern was identified in this review.

This advisory report describes what the named tools and review process found at one exact commit. Unknown or unobserved behavior may still exist.

0 immediate danger 0 material 11 low

What this review found

No material or immediate-danger item was identified.

Deterministic technical evidence (8)

JavaScript analysis reported javascript.xray.serialize-environment · javascript-analysis webcrack-2.16.0_js-x-ray-16.0.0_signatures-1_literals-1_families-1

This technical signal is not part of the shipped runtime behavior.

Policy reason: javascript-xray-inert-tooling · Execution scope: tooling-only

Source: playwright.config.ts:10
JavaScript analysis reported javascript.xray.shady-link · javascript-analysis webcrack-2.16.0_js-x-ray-16.0.0_signatures-1_literals-1_families-1

This technical signal is not part of the shipped runtime behavior.

Policy reason: javascript-xray-inert-tooling · Execution scope: tooling-only

Source: playwright.config.ts:31
JavaScript analysis reported javascript.xray.shady-link · javascript-analysis webcrack-2.16.0_js-x-ray-16.0.0_signatures-1_literals-1_families-1

This technical signal is not part of the shipped runtime behavior.

Policy reason: javascript-xray-inert-tooling · Execution scope: tooling-only

Source: scripts/capture-feature-shots.mjs:11
JavaScript analysis reported javascript.xray.unsafe-command · javascript-analysis webcrack-2.16.0_js-x-ray-16.0.0_signatures-1_literals-1_families-1

This technical signal is not part of the shipped runtime behavior.

Policy reason: javascript-xray-inert-tooling · Execution scope: tooling-only

Source: scripts/generate-build-info.mjs:18-21
Dependency advisory GHSA-68fv-2mgg-jv7q:pkg:9534329f616dc744f00f37e0 applies · osv-scanner 2.4.0

A dependency has a published security issue, though this scan does not show that the project exposes it to an attacker.

Policy reason: osv-structured-advisory · Execution scope: unknown

Source: package-lock.json
Dependency advisory GHSA-ff3f-86qr-9cv3:pkg:a08bb9be05557721207e1b52 applies · osv-scanner 2.4.0

A dependency has a published security issue, though this scan does not show that the project exposes it to an attacker.

Policy reason: osv-structured-advisory · Execution scope: unknown

Source: package-lock.json
Dependency advisory GHSA-67c8-pqhq-4rmx:pkg:209d2478f9a3ba34f2410519 applies · osv-scanner 2.4.0

A dependency has a published security issue, though this scan does not show that the project exposes it to an attacker.

Policy reason: osv-structured-advisory · Execution scope: unknown

Source: package-lock.json
Dependency advisory GHSA-6qxp-vccf-f47h:pkg:1cfd5ef270330d69d56a1ff7 applies · osv-scanner 2.4.0

A dependency has a published security issue, though this scan does not show that the project exposes it to an attacker.

Policy reason: osv-structured-advisory · Execution scope: unknown

Source: package-lock.json

Contextual expected matches (3)

JavaScript analysis reported javascript.xray.shady-link

Expected behavior · high confidence

This file is just a small icon graphic for a link-style UI element. The scanner mistook the graphic's required technical XML identifier for a suspicious web address, but the file contains no code and never connects to anything.

Technical evidence

Scanner reason: JavaScript analysis matched static JavaScript security signal javascript.xray.shady-link. The match applies to this repository.

Contextual assessment: The file contains only a static inline SVG icon rendered with the current color. As with the brand-mark file, the sole URL-like literal is the mandatory SVG XML namespace identifier from the SVG specification. There is no link, no network request, no navigation sink, and no executable logic in the file; the scanner's link signal is a false positive triggered by the namespace string, and the supplied literal content confirms no suspicious destination exists.

Impact: none · Exploitability: unlikely

Developer action: none

Scanner: javascript-analysis webcrack-2.16.0_js-x-ray-16.0.0_signatures-1_literals-1_families-1
Rule: javascript.xray.shady-link
File role: production
Source: src/app/shared/constants/github.ts:1

JavaScript analysis reported javascript.download-to-execution

Expected behavior · high confidence

This code asks the app's own local server for saved lorebook data and shows it in an editor screen. It does not fetch anything from the internet, does not run downloaded content as code, and does not send data anywhere. The scanner flagged it because it saw a network request and some command-like code nearby, but the two are unrelated and both are ordinary parts of how the app works.

Technical evidence

Scanner reason: JavaScript analysis matched static JavaScript security signal javascript.download-to-execution. The match applies to this repository.

Contextual assessment: The flagged region contains same-origin POST requests to the application's own local world-info and settings endpoints, authenticated with the host's standard request headers, returning JSON that is cached and rendered in the World Info editor UI. The response data is never passed into any dynamic code or command execution sink; it is only validated, backfilled with template defaults, sorted, and displayed. The correlation the scanner drew between the network retrieval and an execution sink is not borne out by the supplied data flow: the nearby slash-command registrations reference named callback functions within the same module, which is normal host application behavior, not dynamic execution of retrieved content. Nothing is downloaded and executed, no external destination is contacted, and no untrusted input flows into an execution primitive.

Impact: none · Exploitability: unlikely

Developer action: none

Scanner: javascript-analysis webcrack-2.16.0_js-x-ray-16.0.0_signatures-1_literals-1_families-1
Rule: javascript.download-to-execution
File role: production
Source: sillytaver-world-info-doc/world-info.js:2045-2091

JavaScript analysis reported javascript.xray.shady-link

Expected behavior · high confidence

This file is just a small vector graphic used as the app's logo. The scanner mistook a technical XML identifier inside the graphic for a suspicious web link, but the graphic never contacts anything and contains no code at all.

Technical evidence

Scanner reason: JavaScript analysis matched static JavaScript security signal javascript.xray.shady-link. The match applies to this repository.

Contextual assessment: The file contains only a static inline SVG brand mark. The only URL-like literal is the standard SVG XML namespace identifier, which is a namespaced identifier required by the SVG specification, not a network endpoint, and no code in the file performs any network access, navigation, or data transmission. The scanner's link heuristic matched the namespace string without retaining literal values; the actual content shows no link, destination, or executable behavior whatsoever.

Impact: none · Exploitability: unlikely

Developer action: none

Scanner: javascript-analysis webcrack-2.16.0_js-x-ray-16.0.0_signatures-1_literals-1_families-1
Rule: javascript.xray.shady-link
File role: production
Source: src/app/shared/constants/brand-mark.ts:1

Coverage and limitations

Inventory: 380 files · 6132667 bytes
Contextual coverage: 11 of 11 candidates assessed

JavaScript coverage

Status: Incomplete
Candidates: 186 files · 2471849 bytes
X-Ray review families: 12 warning occurrences compacted to 6 evidence-preserving review families
Representations: 186 raw · 16 decoded · 2 normalized · 0 bundle modules
Stage scans: 186 raw signatures · 13 raw AST · 185 raw OpenGrep · 18 derived signatures · 4 derived AST · 18 derived OpenGrep

Unresolved JavaScript stages

e2e/about-dialog.spec.ts — raw-ast / parse
e2e/batch-and-tokens.spec.ts — raw-ast / parse
e2e/character-card.spec.ts — raw-ast / parse
e2e/delimiters.spec.ts — raw-ast / parse
e2e/entries-drawer-resize.spec.ts — raw-ast / parse
e2e/entry-list-selection.spec.ts — raw-ast / parse
e2e/helpers.ts — raw-ast / parse
e2e/keyboard-navigation.spec.ts — raw-ast / parse
e2e/keyboard-shortcuts.spec.ts — raw-ast / parse
e2e/linter.spec.ts — raw-ast / parse
e2e/mobile-bottom-bar.spec.ts — raw-ast / parse
e2e/nested-menu-touch.spec.ts — raw-ast / parse
e2e/regex-sandbox.spec.ts — raw-ast / parse
e2e/repair.spec.ts — raw-ast / parse
e2e/round-trip.spec.ts — raw-ast / parse
e2e/search-responsiveness.spec.ts — raw-ast / parse
e2e/session-lock.spec.ts — raw-ast / parse
e2e/ui-responsiveness.spec.ts — raw-ast / parse
scripts/make-fuyuki-stproj.mts — raw-ast / parse
src/app/app.config.ts — raw-ast / parse
src/app/app.spec.ts — raw-ast / parse
src/app/app.ts — raw-ast / parse
src/app/core/models/book-repair.spec.ts — raw-ast / parse
src/app/core/models/book-repair.ts — raw-ast / parse
src/app/core/models/book-schema.spec.ts — raw-ast / parse
src/app/core/models/book-schema.ts — raw-ast / parse
src/app/core/models/build-info.ts — raw-ast / parse
src/app/core/models/build-info.types.ts — raw-ast / parse
src/app/core/models/character-card.spec.ts — raw-ast / parse
src/app/core/models/character-card.ts — raw-ast / parse
src/app/core/models/delimiters.spec.ts — raw-ast / parse
src/app/core/models/delimiters.ts — raw-ast / parse
src/app/core/models/lorebook.model.spec.ts — raw-ast / parse
src/app/core/models/lorebook.model.ts — raw-ast / parse
src/app/core/models/lorebook.roundtrip.spec.ts — raw-ast / parse
src/app/core/models/project.model.ts — raw-ast / parse
src/app/core/models/shortcut-map.spec.ts — raw-ast / parse
src/app/core/models/shortcut-map.ts — raw-ast / parse
src/app/core/models/st-key-match.spec.ts — raw-ast / parse
src/app/core/models/st-key-match.ts — raw-ast / parse
src/app/core/models/st-regex.spec.ts — raw-ast / parse
src/app/core/models/st-regex.ts — raw-ast / parse
src/app/core/models/st-trigger.spec.ts — raw-ast / parse
src/app/core/models/st-trigger.ts — raw-ast / parse
src/app/core/services/entry-memo.ts — raw-ast / parse
src/app/core/services/import-export.service.spec.ts — raw-ast / parse
src/app/core/services/import-export.service.ts — raw-ast / parse
src/app/core/services/linter.spec.ts — raw-ast / parse
src/app/core/services/linter.ts — raw-ast / parse
src/app/core/services/session-lock.service.spec.ts — raw-ast / parse
src/app/core/services/session-lock.service.ts — raw-ast / parse
src/app/core/services/sha256.spec.ts — raw-ast / parse
src/app/core/services/sha256.ts — raw-ast / parse
src/app/core/services/storage.service.spec.ts — raw-ast / parse
src/app/core/services/storage.service.ts — raw-ast / parse
src/app/core/services/theme.service.spec.ts — raw-ast / parse
src/app/core/services/theme.service.ts — raw-ast / parse
src/app/core/services/token-estimator.spec.ts — raw-ast / parse
src/app/core/services/token-estimator.ts — raw-ast / parse
src/app/core/services/vcs.service.spec.ts — raw-ast / parse
src/app/core/services/vcs.service.ts — raw-ast / parse
src/app/core/services/workspace.service.spec.ts — raw-ast / parse
src/app/core/services/workspace.service.ts — raw-ast / parse
src/app/features/about/about-dialog.spec.ts — raw-ast / parse
src/app/features/about/about-dialog.ts — raw-ast / parse
src/app/features/about/changelog.ts — raw-ast / parse
src/app/features/about/open-source.ts — raw-ast / parse
src/app/features/commit-history/commit-history.model.ts — raw-ast / parse
src/app/features/commit-history/commit-history.spec.ts — raw-ast / parse
src/app/features/commit-history/commit-history.ts — raw-ast / parse
src/app/features/delimiters/delimiter-dialog.model.ts — raw-ast / parse
src/app/features/delimiters/delimiter-dialog.spec.ts — raw-ast / parse
src/app/features/delimiters/delimiter-dialog.ts — raw-ast / parse
src/app/features/entry-editor/entry-activation/entry-activation.spec.ts — raw-ast / parse
src/app/features/entry-editor/entry-activation/entry-activation.ts — raw-ast / parse
src/app/features/entry-editor/entry-content-field/entry-content-field.spec.ts — raw-ast / parse
src/app/features/entry-editor/entry-content-field/entry-content-field.ts — raw-ast / parse
src/app/features/entry-editor/entry-edit-form.spec.ts — raw-ast / parse
src/app/features/entry-editor/entry-edit-form.ts — raw-ast / parse
src/app/features/entry-editor/entry-editor.model.ts — raw-ast / parse
src/app/features/entry-editor/entry-editor.spec.ts — raw-ast / parse
src/app/features/entry-editor/entry-editor.ts — raw-ast / parse
src/app/features/entry-editor/entry-inclusion-group/entry-inclusion-group.spec.ts — raw-ast / parse
src/app/features/entry-editor/entry-inclusion-group/entry-inclusion-group.ts — raw-ast / parse
src/app/features/entry-editor/entry-keys/entry-keys.spec.ts — raw-ast / parse
src/app/features/entry-editor/entry-keys/entry-keys.ts — raw-ast / parse
src/app/features/entry-editor/entry-keys/highlight-segments.spec.ts — raw-ast / parse
src/app/features/entry-editor/entry-keys/highlight-segments.ts — raw-ast / parse
src/app/features/entry-editor/entry-keys/regex-test-panel.spec.ts — raw-ast / parse
src/app/features/entry-editor/entry-keys/regex-test-panel.ts — raw-ast / parse
src/app/features/entry-editor/entry-matching-sources/entry-matching-sources.constants.ts — raw-ast / parse
src/app/features/entry-editor/entry-matching-sources/entry-matching-sources.spec.ts — raw-ast / parse
src/app/features/entry-editor/entry-matching-sources/entry-matching-sources.ts — raw-ast / parse
src/app/features/entry-editor/entry-name/entry-name.ts — raw-ast / parse
src/app/features/entry-editor/entry-options-accordion/entry-options-accordion.spec.ts — raw-ast / parse
src/app/features/entry-editor/entry-options-accordion/entry-options-accordion.ts — raw-ast / parse
src/app/features/entry-editor/entry-options-accordion/entry-options-panel-state.ts — raw-ast / parse
src/app/features/entry-editor/entry-placement/entry-placement.spec.ts — raw-ast / parse
src/app/features/entry-editor/entry-placement/entry-placement.ts — raw-ast / parse
src/app/features/entry-editor/entry-recursion-timing/entry-recursion-timing.spec.ts — raw-ast / parse

Tools

inventory 0.1.0 — completed
tavernkeeper-static 5 — completed
gitleaks 8.30.1 — completed
opengrep 1.26.0 — completed
javascript-analysis webcrack-2.16.0_js-x-ray-16.0.0_signatures-1_literals-1_families-1 — completed
osv-scanner 2.4.0 — completed
zizmor 1.28.0 — not-applicable
malcontent 1.25.7 — completed

Limitations

This advisory review cannot prove the absence of unknown behavior.
JavaScript analysis was incomplete, so this first-filter scan supports no clean conclusion about unobserved behavior.

Technical scan identity

Full commit: 115c95a3cd2273d43dc5ea3cef76e75137792233
Completed: Oct 9, 2026
History depth: 20 commits
Method: Deterministic evidence with contextual review
Reviewer: nano-gpt.com · zai-org/glm-latest
Scanner: 0.1.0
Scanner policy: 5
Rule catalog: 2
Contextual policy: 5
Ecosystem context: sillytavern-community-v1
Prompt: contextual-review-v7
Assessment schema: contextual-assessment-v2
Review provenance: 3 fresh / 0 reused groups · 3 fresh / 0 reused candidates
Review source reports: none
Evidence triage: 8 deterministic / 3 contextual candidates · 3 contextual / 7 total behavior cases
Model budget: 1 model call · 3 / 12 fresh cases · 40407 / 200000 estimated input · 37006 / 250000 actual input · 1273 / 40000 output tokens
Review batching: 1 model call · up to 3 groups and 3 candidates per call · 0 retry calls · 0 over-budget singleton calls
Review usage: 37006 input · 1273 output · 0 cache read · 172 reasoning tokens
Report: 95420e50a14802878bb7ee2c28f1bdac77323d2ddc770bd7856b189f8df8f4e7