I forgot to consider that it is a Downloader we're talking about. For such a program I'd take control over the used technologies. (E.g. tell Claude to use system wget/curl so that part will stay updated.)

Otherwise I haven't heard of Claude putting backdoors into small programs, or leaving critical vulnerabilities in them, after asking to reevaluate security and test it.