It's not that I dont trust chops. I just think its getting people into a very bad habit to download exe's related to wow and running them, especially if they contain code to automatically update themselves..
color me a worry wart.
Completely understandable. Everyone needs to exercise caution when it comes to running EXEs with Mods, considering the number of account hacks that have been around.
In my WoW history, I had run 2 exes and eventually reduced it to 1. First the Cosmos.exe when wow was new, then I ditched that, and later started using the Allkhazam profiler exe.
And for the DKP part, you can certainly manually download the file, but the EXE is included as a convenience. I doubt many people would use the mod if they all had to download the file, rename it, and put it in the right folder. Hell, a fair portion have trouble installing the mod.
In any case, it's a good idea to always scan viruses anything you download from the web, even if it's from a "trusted" source.
There, for the GRSS, of course, the alternative to running the EXE. Go download ActiveState Perl for Win32, then you can run the GetGRSSDKP.pl perl script, looking at the code of it to see what it does.