video-downloading

SUSPICIOUS. The stated purpose matches video downloading, but the trust model is weak: users are told to paste raw code from a personal repo into DevTools, with no pinned package or release verification. The capability is broadly aligned with purpose, yet the execution path and possible proxy/API routing through non-official endpoints make this a medium-high security risk even without clear evidence of credential theft.