Yeah, that’s totally fair. My prior comment was about that exact script, which you and I can both see isn’t malicious, but OP can’t since they don’t know how to read it yet.
It’s good to point this out. No matter how often reminders are written people still will go and download and run random programs without vetting them. Frankly, I blame how software is distributed for Windows for this general acceptance of blind faith in other peoples’ code without a trusted third party like e.g. the Debian maintainers validating that it works as intended.