sillytavern-extension-builder
Pass
Audited by Gen Agent Trust Hub on Oct 31, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides a structured framework for creating SillyTavern extensions, including templates for manifests, scripts, and stylesheets. It promotes secure coding practices through its quality guidelines, specifically advising against executing untrusted user input and minimizing external network requests.
- [COMMAND_EXECUTION]: The skill includes a local utility script (
scripts/scaffold_extension.sh) used to automate the setup of new extension projects. The script utilizes standard shell commands (mkdir,cp,sed) to generate files from templates. It incorporates input escaping for its replacement logic and checks for existing directories to prevent unintended file overwrites. - [DYNAMIC_EXECUTION]: The JavaScript templates include a mechanism for loading platform-internal modules using the native
import()statement. This is the standard method for extensions to interact with the SillyTavern core API. The templates demonstrate loading these modules using fixed, internal relative paths.
Audit Metadata