JavaScript analysis reported javascript.download-to-execution
Expected behavior · high confidence
This extension talks only to the SillyTavern server it is already running in, to save and reload its own notes file about your chats. Nothing it downloads is ever run as code; it is just read as text and shown or fed into your normal model prompts. The alert was triggered by keywords appearing together, not by an actual dangerous pattern.
Technical evidence
Scanner reason: JavaScript analysis matched static JavaScript security signal javascript.download-to-execution. The match applies to this repository.
Contextual assessment: The scanner flagged co-occurrence of a network primitive and a dynamic execution sink in the same file, but the supplied source shows no such pairing in actual data flow. The network calls are fetch requests to same-origin SillyTavern endpoints: a GET to the user files path to load the per-character facts document and a POST to the file upload endpoint to persist it, both using the host-provided request headers. No third-party or external destination appears anywhere in the supplied code. The retrieved data is treated strictly as data: the JSON response is parsed, validated for an expected structure, and its string fields are rendered into prompt text and UI text, never passed into an evaluator, function constructor, DOM sink with markup, or command executor. The generation calls go through the host context's own generation APIs, which is the extension's stated purpose of summarizing chat transcripts and extracting facts. There is no download-to-execution path, no obfuscation, and no behavior disproportionate to the documented feature set.
Impact: none · Exploitability: unlikely
Developer action: none
- Scanner
- javascript-analysis webcrack-2.16.0_js-x-ray-16.0.0_signatures-1_literals-1_families-1
- Rule
- javascript.download-to-execution
- File role
- production
- Source
- index.js:274-1368