Userscript loaders are fine, they don’t do anything on their own, they just load custom user-defined JavaScript on a specified website. Just make sure not to use Tampermonkey, it’s proprietary. Use Violentmonkey instead, it’s completely open source on GitHub.