TavernKeeper Scan Report

cierru/st-stepped-thinking

Commit 9b58956 Reviewed Aug 9, 2026

1 material concern identified.

This advisory report describes what the named tools and contextual reviewer found at one exact commit. Unknown or unobserved behavior may still exist.

0 immediate danger 1 material 0 low

What this review found

No material or immediate-danger item was identified.

Expected scanner matches (0)

None.

Coverage and limitations

Inventory: 13 files · 164972 bytes
Contextual coverage: 0 of 0 candidates assessed

JavaScript coverage

Status: Incomplete
Candidates: 6 files · 133252 bytes
Representations: 6 raw · 4 decoded · 0 normalized · 0 bundle modules
Stage scans: 6 raw signatures · 6 raw AST · 6 raw OpenGrep · 4 derived signatures · 0 derived AST · 4 derived OpenGrep

Unresolved JavaScript stages

settings/settings.js — derived-ast / parse
settings/settings.js — normalize / parse

Tools

inventory 0.1.0 — completed
tavernkeeper-static 4 — completed
gitleaks 8.30.1 — completed
opengrep 1.26.0 — completed
javascript-analysis webcrack-2.16.0_js-x-ray-16.0.0_signatures-1_literals-1 — completed
osv-scanner 2.4.0 — not-applicable
zizmor 1.28.0 — not-applicable
malcontent 1.25.7 — not-applicable

Limitations

This advisory review cannot prove the absence of unknown behavior.
JavaScript analysis was incomplete, so this first-filter scan supports no clean conclusion about unobserved behavior.

Technical scan identity

Full commit: 9b58956c8e5fe95598e5ad771bcb5c0f9de4fa09
Completed: Aug 9, 2026
History depth: 20 commits
Method: Deterministic evidence with contextual review
Reviewer: api.openai.com · gpt-5.6-luna
Scanner: 0.1.0
Scanner policy: 4
Rule catalog: 1
Contextual policy: 2
Ecosystem context: sillytavern-community-v1
Prompt: contextual-review-v5
Assessment schema: contextual-assessment-v1
Review usage: 0 input · 0 output · 0 cache read · 0 reasoning tokens
Report: 39c2876516184eaad4651fa9061bc25106286d18bd13736b2314f5d27e43c833