[pwdisswordfish9]

They are approximately as big of a risk as any other third-party code you install from the Web onto your machine (e.g. tools from dev SDKs).