Since it's a .zip of a "master" branch, the source code should be visible. Look for suspicious lines like requests.post(webhook_url) which might be sending your private data to a hacker.
If the GitHub repository is deleted or the link is from a Discord DM, do not open it . Raid-Toolbox-master.zip
Mass-joining servers, sending automated messages, or scraping user IDs. Since it's a