HOOKSHOT
GITHUB Warnings and checksums
Is Hookshot safe to run?
The project says scanner warnings are false. This page does not repeat that as a promise. It gives the three checks you can do yourself.
What the readme says
The readme opens with a warning: some people report the release file as a trojan, and the project says it is not, and invites you to run any antivirus you trust. The practical failure it documents is different: the build tools are unsigned, so a scanner deletes them. Restore the file from Windows Security protection history, or exclude the tools folder, then press Repair.
I did not find a VirusTotal link maintained by the project. I will not paste a score from a random repost. If you want a multi-engine look, upload the file you downloaded and read that report yourself. A missing official scan is a gap, not a hidden all-clear.
Three checks
First, if the tag publishes SHA256SUMS, compare it. v2.1.0 does. v2.0.14 does not, so that tag cannot take this check. The hashes are on the download page, copied from the release, not retyped from memory. Second, compute the hash on your machine and compare. Third, build from the public source with the commands on the source page. A source build still needs your game, and the output still must not be shared.
The license is GPL-3.0-or-later. The readme says the tree includes GPL code from Eden, suyu, and Orchid, and that other libraries keep their own notices, including SDL, Opus, Dear ImGui, and zstd. The repository does not contain the game or keys. A finished build does contain the game, which is why it cannot be redistributed. The project also says it is not affiliated with or endorsed by Nintendo.
Questions
Does a checksum prove the file is harmless?
It proves the file matches what that release published. It does not replace reading the license or your own scanner.
Where is the VirusTotal report?
The project did not publish one as of 11 Nov 2026. I am not substituting a number.
Sources
| Source | Evidence status | Checked |
|---|---|---|
| Readme warning | 1 reference · shared publishers and mirrors count together | 2026-11-11 |
| v2.1.0 checksums | 1 reference · shared publishers and mirrors count together | 2026-11-11 |
| Versioning note | 1 reference · shared publishers and mirrors count together | 2026-11-11 |