1 person found this helpful
This is common procedure because the scripts will not work if you do not select that.
It is understandable that you would have the question as a new AE user but if you find scripts under aescripts they are fine. The community is dedicated to providing useful tools. Aescripts, mamoworld scripts, and numerous others are all good. I use tons of them and never have issue.
If you have any specific product script questions feel free to ask.
The scripts cannot run outside the apps, so that takes care of 90% of any potential security issues - if they were to do evil stuff, the apps themselves would refuse to execute the commands (assuming they are not leaky due to bugs of course). In addition to that, scripts themselves have only limited communication capabilities because there really isn't much stuff for socket connections, network and file commands. Again most of that requires some app to run, is tied to specific panels or CC libraries. The risk of someone injecting malicious code is not that great, even more so since jsxbin isn't really that efficient nor executable by itself. It would take forever for malicious code to do anything and it would trigger constant warnings or debug events in the ExtendScript editor. I'm pretty sure from the point of "evil guys" it's not worth it. It's much simpler to just send you a fraudulent e-mail with an infected document...