sillytavern-extension-builder

The code is a local extension scaffolding script with no evident malware or supply-chain backdoor. It has moderate security weaknesses: an attacker who can supply arguments may use a traversal or absolute EXT_SLUG to write outside the requested root, and crafted metadata may modify or break sed replacement commands. Restrict the slug to a validated relative identifier and use robust, delimiter-safe replacement handling.