Names are not evidence of safety
A package called safe-mod.zip is not inherently safe. A strange filename is not inherently malicious. Names are labels and may differ from the underlying content.
What static structure tells us
Without executing included programs, a defensive inventory can describe archive entries, relative paths, nested packages and file-type signatures. Those are useful observations but not a definitive verdict.
Context changes interpretation
A game modification may legitimately include a plugin library, configuration files and assets. The same file type may be unexpected in a different context. Avoid rules that equate one extension with harm.
Report the boundary
Explain which properties were inspected and what remains unknown. “No concerning indicator was observed by this check” is different from “safe.” This article provides no live-sample instructions or performance claims.