The extension loads its built-in list of modes from text files that come with the extension. It reads these files and turns them into a list of options for you to toggle. It does not run or execute any code from those files, so there is no hidden code execution risk.
Technical evidence
Scanner reason: JavaScript analysis matched static JavaScript security signal javascript.download-to-execution in this repository.
Contextual assessment: The code uses fetch() to load configuration files (static asset .txt files from the extension's own directory) that define default mode names, groups, and descriptions. The fetched text is parsed into plain JavaScript objects stored as mode definitions. There is no eval(), new Function(), setTimeout with string, or any other dynamic code execution sink applied to the retrieved content. The 'download-to-execution' pattern is not realized; the downloaded data remains purely configuration data and is never executed as code.