download-video

SUSPICIOUS: the stated purpose matches the capability, but the whole workflow depends on a non-official third-party gateway that receives user URLs, metadata requests, and optional API keys. That intermediary routing is the main security concern; install risk is otherwise low because no external binary or curl|bash path is required.