TavernKeeper Scan Report

kawaii-wolf/ST-koboldcpp-loader-standalone

Commit 42c283b Reviewed

No material or immediate-danger concern was identified in this review.

This advisory report describes what the named tools and review process found at one exact commit. Unknown or unobserved behavior may still exist.

0 immediate danger 0 material 1 low

What this review found

No material or immediate-danger item was identified.

Contextual expected matches (1)

JavaScript analysis reported javascript.download-to-execution

Expected behavior · high confidence

The extension fetches model lists and sends reload commands to the user's own KoboldCPP server, which is exactly what it advertises. The 'code execution' the scanner noticed is just programmatically clicking SillyTavern UI buttons to reconnect after a model reload — no hidden or dangerous code is run.

Technical evidence

Scanner reason: JavaScript analysis matched static JavaScript security signal javascript.download-to-execution. The match applies to this repository.

Contextual assessment: The scanner correlates network fetch primitives (lines 53 and 73) with what it detects as a code execution sink. Examining the actual code, the fetch calls go to user-configured KoboldCPP admin API endpoints (list_options and reload_config) — the stated purpose of the extension. The suspected execution sink is jQuery .click() calls on lines 86 and 89, which simulate UI button presses to trigger SillyTavern's API reconnection flow. These are not eval, Function constructor, or any dynamic code execution primitive. There is no credential exfiltration, no external destination beyond the user-specified KoboldCPP URL, no obfuscation, and no persistence beyond standard extension_settings. All data flow is consistent with the project's README-described purpose of managing KoboldCPP model loading.

Impact: none · Exploitability: unlikely

Developer action: none

Scanner
javascript-analysis webcrack-2.16.0_js-x-ray-16.0.0_signatures-1_literals-1_families-1
Rule
javascript.download-to-execution
File role
production
Source
index.js:53-166

Coverage and limitations

JavaScript coverage

Tools

Limitations

Technical scan identity