@simmerskool
When you are wiling to apply for a free VT license, have a look at Download Sentinel. It checks download URL at VirusTotal (for privacy reasons not the download itself) for script, executables and archives. I am using Linux Mint, so Linux file types are included.
When URL is not known at VT it performs heuristics (e.g file type changed during chrome triggers on-download and file-name-write, inconsistant file and mime type and some more sketchy URL checks).
To find these obfuscation tricks applied by malware it does not block downloads, but warns after file is written to disk (with safety risk rating). It does this by design and offers links to VT (when known on VT or hybrid analysis, when unknown on VT).
It fires on Chrome triggers, so uses no CPU or Memory in normal operations.
@Shadowra has announced a test which will be published
soon. He told me he found two minor issues, which I will try to resolve asap.
In the extension menu you can check that Download Sentinel does not need access. With ctrl+ shift you can see that it is inactive during normal browsing.
I had not expected uBS to get more than a dozen security aware users (has 400+ now), but had expected Download Sentinel to gain some user base (only has 42 now) e.g people using browsers without Chrome services (like Ungoogled Chromium) or people using Linux who don't have an AV warning them for risky downloads.