You'd have to do more research. You can run a fully operating client and still have a keylogger or a RAT in the file. This has happened
years ago when one of the third party clients, maybe even a bot client, got hacked and updated and the person who hacked the
person in control installed a malicious file onto the client so when everyone updated it they all got hacked. At any given point in time
any developer can add a malicious file to a client and update it, which everyone else will do, and everyone is effected.
RuneLite and OsBuddy are the popular most safest ones, with things like this client and many others also being created by sketchy
ex-scammers, lurers, clans, all sorts of shit.
I seen this one was developed by a member in SV clan
This alone would make me never use it.