NEVER use third party services like this.
Your package contains a lot of sensitive data like tenant and user information, connector details, if external requests are used potential client secrets will be leaked etc.
I have no idea if this service is legit and they have absolutely 0 ways of ensuring this.
The zip would need to be unpacked and sanitized on the client side, and even then you would need to scan every line of code for potentially harmful code (Strange regex etc.).
Like previously suggested you can do this yourself within your IDE or other tools, and even then it's a matter of practicing your engineering skills.
One of the main skills you need is the ability to understand the patterns being used and the data flow of the application / workflow, if you don't have this skill you're also not skilled enough to reliably use LLMs to help you.