In general, a script on hawkee or mircscripts should already be verified to be safe.
And yet the
very first snippet on the hawkee front page right now is trivially remotely exploitable to execute arbitrary commands, while a bit further down the same front page we find
this gem..
Perhaps the blanket endorsement in question should be reconsidered?