I found it easier to point my AI at JDownloader's source and have it rebuild the downloaders for certain hosts using python. It works the same without all the bloat.
Other people's code is a security risk.
Just point Claude to a project, and make it clone it, in a safe way.
Otherwise I haven't heard of Claude putting backdoors into small programs, or leaving critical vulnerabilities in them, after asking to reevaluate security and test it.