AutoHotkey is open-source freeware, so you can inspect its code on GitHub. AutoHotkey_L is the latest version used. If the person gets it from GitHub or the official website, it's considered safe and free of any malware or backdoors. You can inspect every line of code yourself.